kubernetes/pkg/proxy/iptables
Antonio Ojea ed21a0e16c kube-proxy: clear conntrack entries after rules are in place
Clear conntrack entries for UDP NodePorts,
this has to be done AFTER the iptables rules are programmed.
It can happen that traffic to the NodePort hits the host before
the iptables rules are programmed this will create an stale entry
in conntrack that will blackhole the traffic, so we need to
clear it ONLY when the service has endpoints.
2021-02-10 16:22:03 +01:00
..
BUILD kube-proxy: clear conntrack entries after rules are in place 2021-02-10 16:22:03 +01:00
OWNERS pkg/proxy: add sig-network-approvers/sig-network-reviewers to OWNERS files 2019-05-13 10:30:29 -05:00
proxier_test.go kube-proxy: clear conntrack entries after rules are in place 2021-02-10 16:22:03 +01:00
proxier.go kube-proxy: clear conntrack entries after rules are in place 2021-02-10 16:22:03 +01:00