nftables

Documentation

Index

• type NFTablesManager
  • func (nftm *NFTablesManager) Init(ctx context.Context, wg *sync.WaitGroup) error
  • func (nftm *NFTablesManager) SetupAndEnsureForwardRules(ctx context.Context, flannelIPv4Network ip.IP4Net, ...)
  • func (nftm *NFTablesManager) SetupAndEnsureMasqRules(ctx context.Context, flannelIPv4Net, prevSubnet, prevNetwork ip.IP4Net, ...) error

Types

type NFTablesManager

type NFTablesManager struct {
	// contains filtered or unexported fields
}

func (*NFTablesManager) Init

func (nftm *NFTablesManager) Init(ctx context.Context, wg *sync.WaitGroup) error

func (*NFTablesManager) SetupAndEnsureForwardRules

func (nftm *NFTablesManager) SetupAndEnsureForwardRules(ctx context.Context,
	flannelIPv4Network ip.IP4Net, flannelIPv6Network ip.IP6Net, resyncPeriod int)

It is needed when using nftables? accept seems to be the default warning: never add a default 'drop' policy on the forwardChain as it breaks connectivity to the node

func (*NFTablesManager) SetupAndEnsureMasqRules

func (nftm *NFTablesManager) SetupAndEnsureMasqRules(ctx context.Context, flannelIPv4Net, prevSubnet, prevNetwork ip.IP4Net,
	flannelIPv6Net, prevIPv6Subnet, prevIPv6Network ip.IP6Net,
	currentlease *lease.Lease,
	resyncPeriod int) error