- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 12 for postrouting (0.17 sec)
-
cni/pkg/iptables/testdata/hostprobe.golden
iptables -t nat -N ISTIO_POSTRT iptables -t nat -A POSTROUTING -j ISTIO_POSTRT
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 30 22:24:38 UTC 2024 - 222 bytes - Viewed (0) -
cni/pkg/iptables/testdata/hostprobe_ipv6.golden
iptables -t nat -N ISTIO_POSTRT iptables -t nat -A POSTROUTING -j ISTIO_POSTRT iptables -t nat -A ISTIO_POSTRT -m owner --socket-exists -p tcp -m set --match-set istio-inpod-probes-v4 dst -j SNAT --to-source 169.254.7.127 ip6tables -t nat -N ISTIO_POSTRT ip6tables -t nat -A POSTROUTING -j ISTIO_POSTRT
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Apr 30 22:24:38 UTC 2024 - 473 bytes - Viewed (0) -
tools/istio-iptables/pkg/constants/constants.go
const ( INPUT = "INPUT" OUTPUT = "OUTPUT" FORWARD = "FORWARD" PREROUTING = "PREROUTING" POSTROUTING = "POSTROUTING" ) var BuiltInChainsMap = map[string]struct{}{ INPUT: {}, OUTPUT: {}, FORWARD: {}, PREROUTING: {}, POSTROUTING: {}, } // Constants used for generating iptables commands const ( TCP = "tcp" UDP = "udp" TPROXY = "TPROXY"
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Apr 12 01:42:30 UTC 2024 - 5.2K bytes - Viewed (0) -
pkg/proxy/iptables/proxier_test.go
-A OUTPUT -m comment --comment kubernetes service portals -j KUBE-SERVICES -A POSTROUTING -m comment --comment kubernetes postrouting rules -j KUBE-POSTROUTING -A KUBE-POSTROUTING -m mark ! --mark 0x4000/0x4000 -j RETURN -A KUBE-POSTROUTING -j MARK --xor-mark 0x4000 -A KUBE-POSTROUTING -m comment --comment "kubernetes service traffic requiring SNAT" -j MASQUERADE -A KUBE-MARK-MASQ -j MARK --or-mark 0x4000
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue May 21 14:39:54 UTC 2024 - 249.9K bytes - Viewed (1) -
cni/pkg/iptables/iptables.go
iptablesBuilder := builder.NewIptablesRuleBuilder(ipbuildConfig(cfg.cfg)) // For easier cleanup, insert a jump into an owned chain // -A POSTROUTING -p tcp -j ISTIO_POSTRT iptablesBuilder.AppendRule( iptableslog.UndefinedCommand, iptablesconstants.POSTROUTING, iptablesconstants.NAT, "-j", ChainHostPostrouting, ) // TODO BML I don't think we need UDP? TCP healthcheck redir should catch everything.
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri May 31 21:45:18 UTC 2024 - 19.9K bytes - Viewed (0) -
pkg/proxy/ipvs/proxier.go
// Create and link the kube postrouting chain for SNAT packets. // Chain POSTROUTING (policy ACCEPT) // target prot opt source destination // KUBE-POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 /* kubernetes postrouting rules * // Maintain by kubelet network sync loop // *nat // :KUBE-POSTROUTING - [0:0] // Chain KUBE-POSTROUTING (1 references)
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sun Apr 28 15:51:23 UTC 2024 - 77.7K bytes - Viewed (0) -
pkg/proxy/nftables/helpers_test.go
add chain ip kube-proxy filter-output { type filter hook output priority -110 ; } add chain ip kube-proxy nat-output { type nat hook output priority -100 ; } add chain ip kube-proxy nat-postrouting { type nat hook postrouting priority 100 ; } add chain ip kube-proxy nat-prerouting { type nat hook prerouting priority -100 ; } add chain ip kube-proxy reject-chain { comment "helper for @no-endpoint-services / @no-endpoint-nodeports" ; }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Apr 02 09:57:47 UTC 2024 - 48.5K bytes - Viewed (0) -
pkg/proxy/iptables/proxier.go
kubeExternalServicesChain utiliptables.Chain = "KUBE-EXTERNAL-SERVICES" // the nodeports chain kubeNodePortsChain utiliptables.Chain = "KUBE-NODEPORTS" // the kubernetes postrouting chain kubePostroutingChain utiliptables.Chain = "KUBE-POSTROUTING" // kubeMarkMasqChain is the mark-for-masquerade chain kubeMarkMasqChain utiliptables.Chain = "KUBE-MARK-MASQ" // the kubernetes forward chain
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue May 21 14:39:54 UTC 2024 - 65.1K bytes - Viewed (0) -
pkg/proxy/nftables/proxier.go
filterOutputChain = "filter-output" filterOutputPostDNATChain = "filter-output-post-dnat" natPreroutingChain = "nat-prerouting" natOutputChain = "nat-output" natPostroutingChain = "nat-postrouting" // service dispatch servicesChain = "services" serviceIPsMap = "service-ips" serviceNodePortsMap = "service-nodeports" // set of IPs that accept NodePort traffic
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Jun 08 13:48:54 UTC 2024 - 55.5K bytes - Viewed (0) -
pkg/proxy/nftables/proxier_test.go
add chain ip kube-proxy nat-output { type nat hook output priority -100 ; } add rule ip kube-proxy nat-output jump services add chain ip kube-proxy nat-postrouting { type nat hook postrouting priority 100 ; } add rule ip kube-proxy nat-postrouting jump masquerading add chain ip kube-proxy nat-prerouting { type nat hook prerouting priority -100 ; } add rule ip kube-proxy nat-prerouting jump services
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Apr 27 01:31:57 UTC 2024 - 173.5K bytes - Viewed (0)