Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

minimize iptables-restore input #110268

Merged
merged 3 commits into from Nov 2, 2022
Merged

minimize iptables-restore input #110268

merged 3 commits into from Nov 2, 2022

Commits on Aug 24, 2022

  1. proxy/iptables: make part of the unit test sanity-checking optional

    @danwinship
    danwinship committed Aug 24, 2022
    Configuration menu
    Copy the full SHA
    c437b15 View commit details
    Browse the repository at this point in the history

Commits on Sep 26, 2022

  1. proxy/iptables: Don't rewrite chains that haven't changed 

    iptables-restore requires that if you change any rule in a chain, you
have to rewrite the entire chain. But if you avoid mentioning a chain
at all, it will leave it untouched. Take advantage of this by not
rewriting the SVC, SVL, EXT, FW, and SEP chains for services that have
not changed since the last sync, which should drastically cut down on
the size of each iptables-restore in large clusters.
    @danwinship
    danwinship committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    ab326d2 View commit details
    Browse the repository at this point in the history

  2. proxy/iptables: Add metric for partial sync failures, add test

    @danwinship
    danwinship committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    818de5a View commit details
    Browse the repository at this point in the history