iptables

package
v18.9.1+incompatible Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 12, 2018 License: Apache-2.0 Imports: 6 Imported by: 0

Documentation

Index

Constants

View Source
const (
	RedirectAllMode             = "redirect-all"
	RedirectListedMode          = "redirect-listed"
	IptablesPreroutingChainName = "PREROUTING"
	IptablesOutputChainName     = "OUTPUT"
)

Variables

View Source
var (
	ExecutionTraceId = strconv.Itoa(int(time.Now().Unix()))
)

Functions

func ConfigureFirewall

func ConfigureFirewall(firewallConfiguration FirewallConfiguration) error

ConfigureFirewall configures a pod's internal iptables to redirect all desired traffic through the proxy, allowing for the pod to join the service mesh. A lot of this logic was based on https://github.com/istio/istio/blob/e83411e/pilot/docker/prepare_proxy.sh

Types

type FirewallConfiguration

type FirewallConfiguration struct {
	Mode                   string
	PortsToRedirectInbound []int
	InboundPortsToIgnore   []int
	OutboundPortsToIgnore  []int
	ProxyInboundPort       int
	ProxyOutgoingPort      int
	ProxyUid               int
	SimulateOnly           bool
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL