Skip to content

Conversation

@jaer-tsun
Copy link
Contributor

@jaer-tsun jaer-tsun commented Apr 29, 2020

What this PR does / why we need it:
Adding support for named ports in NPM

Which issue this PR fixes:
fixes #550

Notes for reviewer
ipset ip+port hash solution

~$ sudo ipset list azure-npm-671120875
Name: azure-npm-671120875
Type: hash:ip,port
Revision: 5
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 152
References: 1
Number of entries: 1
Members:
10.240.0.21,tcp:80

~$ sudo ipset list azure-npm-420423296
Name: azure-npm-420423296
Type: hash:net
Revision: 6
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 472
References: 4
Number of entries: 2
Members:
10.240.0.21
10.240.0.66

match-set azure-npm-420423296 dst match-set azure-npm-1519775445 dst match-set azure-npm-671120875 dst,dst /* ALLOW-ALL-TCP-PORT-serve-80-TO-app:server-IN-ns-e2e-bqhboou21s78hj9mnud0 */

@jaer-tsun jaer-tsun requested review from csfmomo and matmerr April 29, 2020 23:22
@jaer-tsun jaer-tsun changed the title [DO-NOT-MERGE] Named Ports Support Named Ports Support Apr 30, 2020
@jaer-tsun jaer-tsun requested a review from csfmomo April 30, 2020 23:29
@jaer-tsun jaer-tsun merged commit 5e26843 into Azure:master May 1, 2020
@jaer-tsun jaer-tsun deleted the namedPortSupport branch May 1, 2020 18:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[NPM] port not in defined in named port list is reachable in Kubernetes

2 participants