- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 37 for redirector (0.26 sec)
-
cni/README.md
- "sidecar.istio.io/inject" is not false - "sidecar.istio.io/status" exists ### Redirect API The annotation based control is currently only supported in 'sidecar' mode. See plugin/redirect.go for details. - redirectMode allows TPROXY may to be set, required envoy has extra permissions. Default is redirect. - includeIPCidr, excludeIPCidr - includeInboudPorts, excludeInboundPorts
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri May 03 19:29:42 GMT 2024 - 12.3K bytes - Viewed (0) -
cni/pkg/repair/repaircontroller.go
pi := plugin.ExtractPodInfo(pod) redirect, err := plugin.NewRedirect(pi) if err != nil { return fmt.Errorf("setup redirect: %v", err) } rulesMgr := plugin.IptablesInterceptRuleMgr() if err := rulesMgr.Program(pod.Name, netns, redirect); err != nil { return fmt.Errorf("program redirection: %v", err) } return nil } const (
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Feb 10 00:31:55 GMT 2024 - 10.4K bytes - Viewed (0) -
cni/pkg/plugin/sidecar_redirect.go
"kubevirtInterfaces": {kubevirtInterfacesKey, defaultKubevirtInterfaces, alwaysValidFunc}, "excludeInterfaces": {excludeInterfacesKey, defaultExcludeInterfaces, alwaysValidFunc}, } ) // Redirect -- the istio-cni redirect object type Redirect struct { targetPort string redirectMode string noRedirectUID string noRedirectGID string includeIPCidrs string excludeIPCidrs string
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 10.6K bytes - Viewed (0) -
cni/pkg/plugin/testdata/custom-uid-tproxy.txt.golden
-I ISTIO_INBOUND 3 -p tcp -i lo -m mark ! --mark 1338 -j RETURN COMMIT * nat -N ISTIO_INBOUND -N ISTIO_REDIRECT -N ISTIO_IN_REDIRECT -N ISTIO_OUTPUT -A ISTIO_INBOUND -p tcp --dport 15008 -j RETURN -A ISTIO_REDIRECT -p tcp -j REDIRECT --to-ports 15001 -A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-ports 15006 -A OUTPUT -p tcp -j ISTIO_OUTPUT -A ISTIO_OUTPUT -p tcp --dport 15020 -j RETURN
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Wed Apr 26 16:39:28 GMT 2023 - 2K bytes - Viewed (0) -
cni/pkg/plugin/sidecar_iptables_unspecified.go
var ErrNotImplemented = errors.New("not implemented") // Program defines a method which programs iptables based on the parameters // provided in Redirect. func (ipt *iptables) Program(podName, netns string, rdrct *Redirect) error { return ErrNotImplemented
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 1.1K bytes - Viewed (0) -
cni/pkg/iptables/testdata/default.golden
iptables -t nat -A ISTIO_OUTPUT ! -o lo -p udp -m udp --dport 53 -j REDIRECT --to-port 15053 iptables -t nat -A ISTIO_OUTPUT -p tcp -m mark --mark 0x111/0xfff -j ACCEPT iptables -t nat -A ISTIO_OUTPUT ! -d 127.0.0.1/32 -o lo -j ACCEPT
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Fri Jan 26 20:34:28 GMT 2024 - 1.4K bytes - Viewed (0) -
manifests/charts/istiod-remote/templates/crd-all.gen.yaml
maximum: 4294967295 minimum: 0 type: integer scheme: description: On a redirect, overwrite the scheme portion of the URL with this value. type: string uri:
Others - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Mon Apr 22 20:20:47 GMT 2024 - 606.1K bytes - Viewed (0) -
cni/pkg/plugin/kubernetes.go
ProxyEnvironments: make(map[string]string), } for _, c := range containers(pod) { pi.Containers.Insert(c.Name) if c.Name == ISTIOPROXY { // don't include ports from istio-proxy in the redirect ports // Get proxy container env variable, and extract out ProxyConfig from it. for _, e := range c.Env { pi.ProxyEnvironments[e.Name] = e.Value } if len(c.Args) >= 2 && c.Args[0] == "proxy" {
Go - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Feb 10 00:31:55 GMT 2024 - 3.6K bytes - Viewed (0) -
architecture/ambient/ztunnel.md
## Redirection As ztunnel aims to transparently encrypt and route users traffic, we need a mechanism to capture all traffic entering and leaving "mesh" pods. This is a security critical task: if the ztunnel can be bypassed, authorization policies can be bypassed. Redirection must meet these requirements: * All traffic *egressing* a pod in the mesh should be redirected to the node-local ztunnel on port 15001.
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Thu Apr 25 22:35:16 GMT 2024 - 16.6K bytes - Viewed (0) -
common/Makefile.common.mk
lint-links: @${FINDFILES} -name '*.md' -print0 | ${XARGS} awesome_bot --skip-save-results --allow_ssl --allow-timeout --allow-dupe --allow-redirect --white-list ${MARKDOWN_LINT_ALLOWLIST} lint-sass: @${FINDFILES} -name '*.scss' -print0 | ${XARGS} sass-lint -c common/config/sass-lint.yml --verbose lint-typescript:
Plain Text - Registered: Wed May 08 22:53:08 GMT 2024 - Last Modified: Sat Mar 02 20:07:36 GMT 2024 - 5.9K bytes - Viewed (0)