Bryan Boreham
ee6596e21c
Run iptables commands in a loop
...
in case they get "temporarily unavailable" exit
2016-12-05 11:11:20 +00:00
Bryan Boreham
a07e3301b1
Add 'weave expose' NAT iptables rules inside CNI plugin
...
This avoids a race between the plugin and the script
2016-11-14 12:37:42 +00:00
Martynas Pumputis
3492cd93d0
Use safe version of WithNetNS
2016-10-19 16:15:59 +01:00
Bryan Boreham
88bf64722f
Merge branch '1.6'
2016-07-12 10:33:38 +00:00
Martynas Pumputis
89221f117b
Denote WithNetNS* functions with unsafe
...
Please see https://github.com/weaveworks/weave/issues/2388#issuecomment-228365069
for more details.
2016-07-05 15:12:39 +01:00
Adam Harrison
f386548890
Maintain per-subnet ACCEPT rule for multicast ingress
2016-06-17 17:19:52 +01:00
Adam Harrison
c80d87554a
Maintain per-interface DROP rule for multicast ingress
2016-06-17 16:10:13 +01:00
Martynas Pumputis
7670fed72c
Add AWSVPC setup routines to the attach script
...
When running in the AWSVPC mode, we need to do the following:
- Keep the HW TX offloading on.
- Check that the allocated address belongs to the default subnet,
because only one subnet is allowed and it should be the default one.
If it is not possible to determine whether AWSVPC is on, we ignore
all the steps, because the attachment routines have to work
regardless whether the router is running and the AWSVPC detection
is done by querying the /ipinfo/tracker endpoint served by
the router.
2016-06-08 16:44:54 +01:00
Bryan Boreham
b417696c66
Wait 1ms before sending gratuitous arp
2016-05-26 11:17:04 +00:00
Bryan Boreham
6dd109a5bb
Only do ethtool tx off in bridged (pcap) mode.
...
Detect the bridge type in the same way the weave script does.
2016-05-25 17:34:13 +01:00
Bryan Boreham
2702b85ee5
Improve veth name construction; use a constant instead of "ethwe"
2016-05-25 17:34:13 +01:00
Bryan Boreham
8717fd15ed
Use 'peer' and 'veth' instead of 'guest' and 'local', after review comments
2016-05-25 17:34:13 +01:00
Bryan Boreham
ac14b19db8
Move attach() and detach() from shell script to Go
2016-05-25 17:34:13 +01:00
Bryan Boreham
85023e0a76
Extract AttachContainer() function
...
Also move netlink and netns code from common to net
Creates interface if not already there
Adds addresses
Move the set link 'up' to after addresses are added
2016-05-25 17:29:45 +01:00
Bryan Boreham
0257274aa8
Extract basic veth setup
2016-05-25 17:23:49 +01:00
Bryan Boreham
9aaa7f19fd
initialize via sub-function
2016-05-25 17:17:19 +01:00
Bryan Boreham
d59c170cd5
Remove veth on error
2016-05-25 17:17:19 +01:00
Bryan Boreham
f11d91badf
Extract veth creation and LinkSetUp to net package
2016-05-25 17:17:19 +01:00
Bryan Boreham