Dan Winship
bcced184c5
Replace "iptables-restore" sync in nftables/proxier.go with (trivial) "nft -f -" sync
2023-10-31 17:38:32 -04:00
Dan Winship
abb1a458a9
Create an nftables.Interface in nftables proxier
...
And update most of the comments to refer to "nftables" rather than
"iptables" (even though it doesn't actually do any nftables updating
at this point).
For now the proxy also internally creates a
utiliptablestesting.FakeIPTables to keep the existing sync code
compiling.
2023-10-31 17:38:29 -04:00
Dan Winship
1a530457f9
Drop unit tests of iptables-specific unit test helpers
...
(We'll eventually have nftables versions.)
2023-10-31 17:33:53 -04:00
Dan Winship
ecb7752f0b
Simplify nftables/proxier.go by removing HaveRandomFully checks
2023-10-31 17:33:53 -04:00
Dan Winship
5f09106063
Simplify nftables/proxier.go by dropping "-j ACCEPT" rules
2023-10-31 17:33:53 -04:00
Dan Winship
1a6b9b811e
Simplify nftables/proxier.go by removing localhost nodeport support
...
and related route_localnet setting / anti-martian-packet rule
2023-10-31 17:33:53 -04:00
Dan Winship
e7c35d27f7
Simplify nftables/proxier.go by removing partial syncing
...
Since optimization will be done differently in nftables.
2023-10-31 17:33:53 -04:00
Dan Winship
39a5af1d0a
Simplify nftables/proxier.go by removing large-cluster mode
...
since things will be optimized differently in nftables
2023-10-31 17:33:53 -04:00
Dan Winship
a70653143e
Add a dummy nftables kube-proxy backend which is just a copy of iptables
2023-10-31 17:31:42 -04:00
