kubernetes/pkg/proxy/iptables
Dan Winship da14a12fe5 proxy/iptables: move endpoint chain rule creation to the end
Part of reorganizing the syncProxyRules loop to do:
  1. figure out what chains are needed, mark them in activeNATChains
  2. write servicePort jump rules to KUBE-SERVICES/KUBE-NODEPORTS
  3. write servicePort-specific chains (SVC, SVL, EXT, FW, SEP)

This fixes the handling of the endpoint chains. Previously they were
handled entirely at the top of the loop. Now we record which ones are
in use at the top but don't create them and fill them in until the
bottom.
2022-07-09 06:51:47 -04:00
..
number_generated_rules_test.go kube-proxy iptables test number of generated iptables rules 2022-06-14 11:55:42 +02:00
OWNERS Check in OWNERS modified by update-yamlfmt.sh 2021-12-09 21:31:26 -05:00
proxier_test.go proxy/iptables: Don't use KUBE-MARK-DROP for "no local endpoints" 2022-06-29 16:37:24 -04:00
proxier.go proxy/iptables: move endpoint chain rule creation to the end 2022-07-09 06:51:47 -04:00