iptables

Documentation

Index

• Constants
• type IptablesManager
  • func NewIptablesManager(client clientset.Interface, nodeInformer coreinformer.NodeInformer, ...) IptablesManager
  • func NewIptablesManagerWithIPFamily(client clientset.Interface, nodeInformer coreinformer.NodeInformer, ...) (IptablesManager, error)

Constants

const (

	// NoConnectionToDelete is the error string returned by conntrack when no matching connections are found
	NoConnectionToDelete = "0 flow entries have been deleted"
)

Types

type IptablesManager

type IptablesManager interface {
	Run(stopCh <-chan struct{}, wg *sync.WaitGroup)
}

IptablesManager interface defines the method for adding dnat rules to host that needs to send network packages to kubelets

func NewIptablesManager

func NewIptablesManager(client clientset.Interface,
	nodeInformer coreinformer.NodeInformer,
	listenAddr string,
	listenInsecureAddr string,
	syncPeriod int) IptablesManager

NewIptablesManager creates an IptablesManager with ipv4 protocol

func NewIptablesManagerWithIPFamily

func NewIptablesManagerWithIPFamily(client clientset.Interface,
	nodeInformer coreinformer.NodeInformer,
	listenAddr string,
	listenInsecureAddr string,
	syncPeriod int,
	ipFamily iptables.Protocol) (IptablesManager, error)

NewIptablesManagerWithIPFamily creates an IptablesManager; deletes old chains, if any; generates new dnat rules based on IPs of current active nodes; and appends the rules to the iptable.