conntrack

Documentation

Index

• Constants
• func CleanStaleEntries(isIPv6 bool, exec utilexec.Interface, svcPortMap proxy.ServicePortMap, ...)
• func ClearEntriesForIP(execer exec.Interface, ip string, protocol v1.Protocol) error
• func ClearEntriesForNAT(execer exec.Interface, origin, dest string, protocol v1.Protocol) error
• func ClearEntriesForPort(execer exec.Interface, port int, isIPv6 bool, protocol v1.Protocol) error
• func ClearEntriesForPortNAT(execer exec.Interface, dest string, port int, protocol v1.Protocol) error
• func Exec(execer exec.Interface, parameters ...string) error

Constants

const NoConnectionToDelete = "0 flow entries have been deleted"

NoConnectionToDelete is the error string returned by conntrack when no matching connections are found

Functions

func CleanStaleEntries

func CleanStaleEntries(isIPv6 bool, exec utilexec.Interface, svcPortMap proxy.ServicePortMap,
	serviceUpdateResult proxy.UpdateServiceMapResult, endpointUpdateResult proxy.UpdateEndpointMapResult)

CleanStaleEntries takes care of flushing stale conntrack entries for services and endpoints.

func ClearEntriesForIP

func ClearEntriesForIP(execer exec.Interface, ip string, protocol v1.Protocol) error

ClearEntriesForIP uses the conntrack tool to delete the conntrack entries for the UDP connections specified by the given service IP

func ClearEntriesForNAT

func ClearEntriesForNAT(execer exec.Interface, origin, dest string, protocol v1.Protocol) error

ClearEntriesForNAT uses the conntrack tool to delete the conntrack entries for connections specified by the {origin, dest} IP pair.

func ClearEntriesForPort

func ClearEntriesForPort(execer exec.Interface, port int, isIPv6 bool, protocol v1.Protocol) error

ClearEntriesForPort uses the conntrack tool to delete the conntrack entries for connections specified by the port. When a packet arrives, it will not go through NAT table again, because it is not "the first" packet. The solution is clearing the conntrack. Known issues: https://github.com/docker/docker/issues/8795 https://github.com/kubernetes/kubernetes/issues/31983

func ClearEntriesForPortNAT

func ClearEntriesForPortNAT(execer exec.Interface, dest string, port int, protocol v1.Protocol) error

ClearEntriesForPortNAT uses the conntrack tool to delete the conntrack entries for connections specified by the {dest IP, port} pair. Known issue: https://github.com/kubernetes/kubernetes/issues/59368

func Exec

func Exec(execer exec.Interface, parameters ...string) error

Exec executes the conntrack tool using the given parameters