util

Documentation

Index

• func ClearUDPConntrackForIP(execer exec.Interface, ip string) error
• func ClearUDPConntrackForPeers(execer exec.Interface, origin, dest string) error
• func ClearUDPConntrackForPort(execer exec.Interface, port int) error
• func ExecConntrackTool(execer exec.Interface, parameters ...string) error
• func IsLocalIP(ip string) (bool, error)
• func RevertPorts(replacementPortsMap, originalPortsMap map[LocalPort]Closeable)
• func ShouldSkipService(svcName types.NamespacedName, service *api.Service) bool
• type Closeable
• type LocalPort
  • func (lp *LocalPort) String() string
• type PortOpener

Functions

func ClearUDPConntrackForIP

func ClearUDPConntrackForIP(execer exec.Interface, ip string) error

DeleteServiceConnections uses the conntrack tool to delete the conntrack entries for the UDP connections specified by the given service IP

func ClearUDPConntrackForPeers

func ClearUDPConntrackForPeers(execer exec.Interface, origin, dest string) error

ClearUDPConntrackForPeers uses the conntrack tool to delete the conntrack entries for the UDP connections specified by the {origin, dest} IP pair.

func ClearUDPConntrackForPort

func ClearUDPConntrackForPort(execer exec.Interface, port int) error

ClearUDPConntrackForPort uses the conntrack tool to delete the conntrack entries for the UDP connections specified by the port. When a packet arrives, it will not go through NAT table again, because it is not "the first" packet. The solution is clearing the conntrack. Known issues: https://github.com/docker/docker/issues/8795 https://github.com/kubernetes/kubernetes/issues/31983

func ExecConntrackTool

func ExecConntrackTool(execer exec.Interface, parameters ...string) error

ExecConntrackTool executes the conntrack tool using the given parameters

func IsLocalIP

func IsLocalIP(ip string) (bool, error)

func RevertPorts

func RevertPorts(replacementPortsMap, originalPortsMap map[LocalPort]Closeable)

RevertPorts is closing ports in replacementPortsMap but not in originalPortsMap. In other words, it only closes the ports opened in this sync.

func ShouldSkipService

func ShouldSkipService(svcName types.NamespacedName, service *api.Service) bool

Types

type Closeable

type Closeable interface {
	Close() error
}

Closeable is an interface around closing an port.

type LocalPort

type LocalPort struct {
	// Description is the identity message of a given local port.
	Description string
	// IP is the IP address part of a given local port.
	// If this string is empty, the port binds to all local IP addresses.
	IP string
	// Port is the port part of a given local port.
	Port int
	// Protocol is the protocol part of a given local port.
	// The value is assumed to be lower-case. For example, "udp" not "UDP", "tcp" not "TCP".
	Protocol string
}

LocalPort describes a port on specific IP address and protocol

func (*LocalPort) String

func (lp *LocalPort) String() string

type PortOpener

type PortOpener interface {
	OpenLocalPort(lp *LocalPort) (Closeable, error)
}

PortOpener is an interface around port opening/closing. Abstracted out for testing.