![]() iptables-restore requires that if you change any rule in a chain, you have to rewrite the entire chain. But if you avoid mentioning a chain at all, it will leave it untouched. Take advantage of this by not rewriting the SVC, SVL, EXT, FW, and SEP chains for services that have not changed since the last sync, which should drastically cut down on the size of each iptables-restore in large clusters. |
||
---|---|---|
.. | ||
number_generated_rules_test.go | ||
OWNERS | ||
proxier_test.go | ||
proxier.go |