- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 664 for nftables (0.17 sec)
-
cmd/kube-proxy/app/server_linux.go
logger.Info("Using nftables Proxier") if dualStack { // TODO this has side effects that should only happen when Run() is invoked. proxier, err = nftables.NewDualStackProxier( ctx, config.NFTables.SyncPeriod.Duration, config.NFTables.MinSyncPeriod.Duration, config.NFTables.MasqueradeAll, int(*config.NFTables.MasqueradeBit), localDetectors, s.Hostname,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Jun 08 13:48:54 UTC 2024 - 18.1K bytes - Viewed (0) -
pkg/proxy/apis/config/v1alpha1/defaults.go
obj.OOMScoreAdj = &temp } if obj.IPTables.SyncPeriod.Duration == 0 { obj.IPTables.SyncPeriod = metav1.Duration{Duration: 30 * time.Second} } if obj.IPTables.MinSyncPeriod.Duration == 0 { obj.IPTables.MinSyncPeriod = metav1.Duration{Duration: 1 * time.Second} } if obj.IPTables.LocalhostNodePorts == nil { obj.IPTables.LocalhostNodePorts = ptr.To(true) } if obj.IPVS.SyncPeriod.Duration == 0 {
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Oct 31 21:33:53 UTC 2023 - 5.2K bytes - Viewed (0) -
pkg/proxy/nftables/proxier.go
{filterOutputChain, knftables.FilterType, knftables.OutputHook, knftables.DNATPriority + "-10"}, {filterOutputPostDNATChain, knftables.FilterType, knftables.OutputHook, knftables.DNATPriority + "+10"}, {natPreroutingChain, knftables.NATType, knftables.PreroutingHook, knftables.DNATPriority}, {natOutputChain, knftables.NATType, knftables.OutputHook, knftables.DNATPriority},
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sat Jun 08 13:48:54 UTC 2024 - 55.5K bytes - Viewed (0) -
pkg/proxy/util/localdetector.go
// IfNotLocal returns iptables arguments that will match traffic that is not from // a local pod. IfNotLocal() []string // IfLocalNFT returns nftables arguments that will match traffic from a local pod. IfLocalNFT() []string // IfNotLocalNFT returns nftables arguments that will match traffic that is not // from a local pod. IfNotLocalNFT() []string } type detectLocal struct { ifLocal []string
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Apr 26 15:34:37 UTC 2024 - 3.6K bytes - Viewed (0) -
pkg/proxy/nftables/README.md
# NFTables kube-proxy This is an implementation of service proxying via the nftables API of the kernel netfilter subsystem. ## General theory of netfilter Packet flow through netfilter looks something like: ```text +================+ +=====================+ | hostNetwork IP | | hostNetwork process | +================+ +=====================+ ^ |
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sun Jan 21 14:37:56 UTC 2024 - 5.9K bytes - Viewed (0) -
pkg/proxy/apis/config/types.go
Mode ProxyMode // iptables contains iptables-related configuration options. IPTables KubeProxyIPTablesConfiguration // ipvs contains ipvs-related configuration options. IPVS KubeProxyIPVSConfiguration // winkernel contains winkernel-related configuration options. Winkernel KubeProxyWinkernelConfiguration // nftables contains nftables-related configuration options. NFTables KubeProxyNFTablesConfiguration
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Apr 18 13:25:06 UTC 2024 - 13K bytes - Viewed (0) -
pkg/proxy/apis/config/scheme/testdata/KubeProxyConfiguration/roundtrip/default/v1alpha1.yaml
logging: flushFrequency: 5s format: text options: json: infoBufferSize: "0" text: infoBufferSize: "0" verbosity: 0 metricsBindAddress: 127.0.0.1:10249 mode: "" nftables: masqueradeAll: false masqueradeBit: 14 minSyncPeriod: 1s syncPeriod: 30s nodePortAddresses: null oomScoreAdj: -999 portRange: "" showHiddenMetricsForVersion: "" winkernel: enableDSR: false
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Jan 17 12:50:03 UTC 2024 - 1.4K bytes - Viewed (0) -
cni/pkg/plugin/sidecar_intercept_rule_mgr.go
// limitations under the License. package plugin // InterceptRuleMgr configures networking tables (e.g. iptables or nftables) for // redirecting traffic to an Istio proxy. type InterceptRuleMgr interface { Program(podName, netns string, redirect *Redirect) error } // Constructor for iptables InterceptRuleMgr func IptablesInterceptRuleMgr() InterceptRuleMgr { return newIPTables()
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Sat Feb 10 00:31:55 UTC 2024 - 940 bytes - Viewed (0) -
pkg/proxy/metrics/metrics.go
// proxy has seen. NFTablesSyncFailuresTotal = metrics.NewCounter( &metrics.CounterOpts{ Subsystem: kubeProxySubsystem, Name: "sync_proxy_rules_nftables_sync_failures_total", Help: "Cumulative proxy nftables sync failures", StabilityLevel: metrics.ALPHA, }, ) // NFTablesCleanupFailuresTotal is the number of nftables stale chain cleanup
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue May 21 14:39:54 UTC 2024 - 13.7K bytes - Viewed (0) -
pkg/proxy/apis/config/v1alpha1/defaults_test.go
MinSyncPeriod: metav1.Duration{Duration: 1 * time.Second}, }, IPVS: kubeproxyconfigv1alpha1.KubeProxyIPVSConfiguration{ SyncPeriod: metav1.Duration{Duration: 30 * time.Second}, }, NFTables: kubeproxyconfigv1alpha1.KubeProxyNFTablesConfiguration{ MasqueradeBit: ptr.To[int32](14), MasqueradeAll: false, SyncPeriod: metav1.Duration{Duration: 30 * time.Second},
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Oct 31 21:33:53 UTC 2023 - 5.1K bytes - Viewed (0)