Dan Winship
0993bb78ef
Redo service dispatch with maps
2023-10-31 17:54:53 -04:00
Dan Winship
9d71513ac1
Redo no-endpoint handling with maps
2023-10-31 17:54:53 -04:00
Dan Winship
4128631d0f
Redo LoadBalancerSourceRanges firewall using sets
2023-10-31 17:54:53 -04:00
Dan Winship
ef1347b06d
Port NAT rules to nftables (and backend is now functional)
2023-10-31 17:54:51 -04:00
Dan Winship
0c5c620b4f
Port filter rules to nftables
2023-10-31 17:40:45 -04:00
Dan Winship
6cff415305
Port service/endpoint chain creation/cleanup to nftables
2023-10-31 17:40:45 -04:00
Dan Winship
2735ad541e
Port table setup/cleanup code to nftables
2023-10-31 17:40:30 -04:00
Dan Winship
bcced184c5
Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
2023-10-31 17:38:32 -04:00
Dan Winship
abb1a458a9
Create an nftables.Interface in nftables proxier
...
And update most of the comments to refer to "nftables" rather than
"iptables" (even though it doesn't actually do any nftables updating
at this point).
For now the proxy also internally creates a
utiliptablestesting.FakeIPTables to keep the existing sync code
compiling.
2023-10-31 17:38:29 -04:00
Dan Winship
1a530457f9
Drop unit tests of iptables-specific unit test helpers
...
(We'll eventually have nftables versions.)
2023-10-31 17:33:53 -04:00
Dan Winship
ecb7752f0b
Simplify nftables/proxier.go by removing HaveRandomFully checks
2023-10-31 17:33:53 -04:00
Dan Winship
5f09106063
Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
2023-10-31 17:33:53 -04:00
Dan Winship
1a6b9b811e
Simplify nftables/proxier.go by removing localhost nodeport support
...
and related route_localnet setting / anti-martian-packet rule
2023-10-31 17:33:53 -04:00
Dan Winship
e7c35d27f7
Simplify nftables/proxier.go by removing partial syncing
...
Since optimization will be done differently in nftables.
2023-10-31 17:33:53 -04:00
Dan Winship
39a5af1d0a
Simplify nftables/proxier.go by removing large-cluster mode
...
since things will be optimized differently in nftables
2023-10-31 17:33:53 -04:00
Dan Winship
a70653143e
Add a dummy nftables kube-proxy backend which is just a copy of iptables
2023-10-31 17:31:42 -04:00
