fix: fip unbind can't take effect immediately when conntrack record e…

…xists (#1922)
kubeovn · Sep 21, 2022 · 16c0ed9 · 16c0ed9
1 parent 606e6f6
commit 16c0ed9
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/dist/images/vpcnatgateway/Dockerfile b/dist/images/vpcnatgateway/Dockerfile
@@ -8,7 +8,8 @@ RUN set -ex \
     iproute2 \
     iptables \
     iputils \
-    tcpdump
+    tcpdump \
+    conntrack-tools
 
 WORKDIR /kube-ovn
 COPY nat-gateway.sh /kube-ovn/

diff --git a/dist/images/vpcnatgateway/nat-gateway.sh b/dist/images/vpcnatgateway/nat-gateway.sh
@@ -159,6 +159,7 @@ function del_floating_ip() {
         if [ "$?" -eq 0 ];then
             exec_cmd "iptables -t nat -D EXCLUSIVE_DNAT -d $eip -j DNAT --to-destination $internalIp"
             exec_cmd "iptables -t nat -D EXCLUSIVE_SNAT -s $internalIp -j SNAT --to-source $eip"
+            exec_cmd "conntrack -D -d $eip"
         fi
     done
 }