iptables

Documentation

Index

• Constants
• Variables
• func ConfigureFirewall(firewallConfiguration FirewallConfiguration) error
• type FirewallConfiguration

Constants

const (
	RedirectAllMode             = "redirect-all"
	RedirectListedMode          = "redirect-listed"
	IptablesPreroutingChainName = "PREROUTING"
	IptablesOutputChainName     = "OUTPUT"
)

Variables

var (
	ExecutionTraceId = strconv.Itoa(int(time.Now().Unix()))
)

Functions

func ConfigureFirewall

func ConfigureFirewall(firewallConfiguration FirewallConfiguration) error

ConfigureFirewall configures a pod's internal iptables to redirect all desired traffic through the proxy, allowing for the pod to join the service mesh. A lot of this logic was based on https://github.com/istio/istio/blob/e83411e/pilot/docker/prepare_proxy.sh

Types

type FirewallConfiguration

type FirewallConfiguration struct {
	Mode                   string
	PortsToRedirectInbound []int
	InboundPortsToIgnore   []int
	OutboundPortsToIgnore  []int
	ProxyInboundPort       int
	ProxyOutgoingPort      int
	ProxyUid               int
	SimulateOnly           bool
}