Martynas Pumputis 25cff16bd1 Create WEAVE-EXPOSE iptables chain ...

Docker 1.13 has changed a default policy of FORWARD chain to DROP
(https://github.com/moby/moby/pull/28257) which makes containers
inaccessible from a remote host when the bridge is exposed.

The change breaks e.g. the AWSVPC mode. To overcome this we install
an explicit rule for accepting forwarded ingress traffic to an
exposed subnet which is appended to the WEAVE-EXPOSE chain.

The chain is a target of the rule "-t filter -A FORWARD -o weave".

2017-10-17 12:08:43 +01:00

..

address

Add conversion from CIDR to IPNet

2017-04-17 19:41:47 +00:00

ipsec

Remove explicit error check at end of functions to placate lint

2017-10-04 13:40:13 +00:00

arp.go

Remove explicit error check at end of functions to placate lint

2017-10-04 13:40:13 +00:00

bridge.go

Create WEAVE-EXPOSE iptables chain

2017-10-17 12:08:43 +01:00

ethtool.go

Check current tx value before trying to set it

2016-09-08 10:20:35 +01:00

expose.go

Create WEAVE-EXPOSE iptables chain

2017-10-17 12:08:43 +01:00

if.go

Peer Discovery via a web service

2017-04-10 14:09:06 +00:00

listen.go

Extract function to listen on Unix socket

2016-02-01 10:11:46 +00:00

mac.go

Generate peer name / mac address in Go

2017-01-11 13:12:30 +00:00

netdev.go

Encode "list-netdevs" output in JSON

2016-10-20 18:18:57 +01:00

netns.go

Add NSPathByPidWithRoot

2017-04-12 13:05:40 +00:00

route_test.go

Replacing custom testing helpers with testify, where possible

2015-06-17 16:58:03 +01:00

route.go

Remove punctuation from the end of error messages

2016-11-18 10:40:41 +00:00

uuid.go

Ensure boltDB pathname is constructed uniformly

2017-04-11 15:45:04 +00:00

veth.go

Handle "weave expose" in weaver

2017-10-17 12:08:43 +01:00