iptables

Documentation

Index

• Constants
• Variables
• type Client
  • func NewClient(hostGateway string, serviceCIDR *net.IPNet, ...) *Client
  • func (c *Client) AddPeerCIDR(peerPodCIDR *net.IPNet, peerNodeIP net.IP) error
  • func (c *Client) Initialize(nodeConfig *config.NodeConfig) error
  • func (c *Client) IsInRuleStore(table string, chain string, ruleSpec []string) bool
  • func (c *Client) PrintStoredRules() string
  • func (c *Client) Reconcile() error

Constants

const (
	NATTable    = "nat"
	FilterTable = "filter"
	MangleTable = "mangle"
	RawTable    = "raw"

	AcceptTarget     = "ACCEPT"
	MasqueradeTarget = "MASQUERADE"
	MarkTarget       = "MARK"
	ConnTrackTarget  = "CT"

	PreRoutingChain        = "PREROUTING"
	ForwardChain           = "FORWARD"
	PostRoutingChain       = "POSTROUTING"
	AntreaForwardChain     = "ANTREA-FORWARD"
	AntreaPostRoutingChain = "ANTREA-POSTROUTING"
	AntreaMangleChain      = "ANTREA-MANGLE"
	AntreaRawChain         = "ANTREA-RAW"
)

Variables

var (

	// RtTblSelectorValue selects which route table to use to forward service traffic back to host gateway gw0.
	RtTblSelectorValue = 1 << 11
)

Types

type Client

type Client struct {
	// contains filtered or unexported fields
}

Client knows how to set up host iptables rules Antrea requires.

func NewClient

func NewClient(hostGateway string, serviceCIDR *net.IPNet, encapMode config.TrafficEncapModeType) *Client

NewClient constructs a Client instance for iptables operations.

func (*Client) AddPeerCIDR

func (c *Client) AddPeerCIDR(peerPodCIDR *net.IPNet, peerNodeIP net.IP) error

AddPeerCIDR adds iptables rules relevant to peerPodCIDR It's idempotent and can be safely called on every startup.

func (*Client) Initialize

func (c *Client) Initialize(nodeConfig *config.NodeConfig) error

Initialize sets up internal variables and ensures the iptables rules Antrea requires are set up. It's idempotent and can be safely called on every startup.

func (*Client) IsInRuleStore

func (c *Client) IsInRuleStore(table string, chain string, ruleSpec []string) bool

IsInRuleStore returns true if rule is in rule store.

func (*Client) PrintStoredRules

func (c *Client) PrintStoredRules() string

PrintStoredRules dumps stored ip rules for debugging.

func (*Client) Reconcile

func (c *Client) Reconcile() error

Reconcile removes stale antrea rules