-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Consolidate rules added to output chain
This commit adds destination addresses to match for dnat in a single rule. By default traffic destined to 127.0.0.1 is DNATed. With istio, we need to additionally take care of passthrough traffic (traffic destined to ports not declared in a k8s) which is sent from 127.0.0.6 to pod IP. Since we're using destination address to match traffic for dnatting, this commit reads pod IP of the virt launcher and adds it to the set of matched IP addresses, if istio is used. Signed-off-by: Radim Hrazdil <rhrazdil@redhat.com>
- Loading branch information
Radim Hrazdil
committed
May 13, 2021
1 parent
8c6b176
commit 2f31699
Showing
2 changed files
with
18 additions
and
14 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters