weave

reweave/weave

0 Fork 0

Files

T

Martynas Pumputis 0a0dbe115a npc: Track ipset entries per user

There was a bug in handling "default-allow" ipsets - it could not
cope with out of order receive of Pod updates. E.g:

    1) AddPod(Pod_A, PodIP_A),
    2) AddPod(Pod_B, PodIP_A),
    3) DeletePod(Pod_A),

would result with PodIP_A being removed from "default-allow" ipset,
as such ipset entries were not refcounted. Bypassing of refcounting
was due to the fact that adding a netpol which dst-selects a Pod which
IP addr is in "default-allow" ipset has to remove the IP addr from
the ipset regardless of refcount value of the IP addr entry in the
ipset. So, refcounting in such case didn't make sense and it was
bypassed.

This commit changes the way entries are refcounted in ipsets, and
it makes "default-allow" ipset the same citizen as other ipsets, so
from now "default-allow" ipset is refcounted.

2017-11-21 14:41:29 +02:00

ipset

npc: Track ipset entries per user

2017-11-21 14:41:29 +02:00

iptables

Refactor iptables usage in weave-npc to make it testable

2017-07-14 14:45:41 +01:00

metrics

Change rest of npc to weave common logging

2016-12-13 13:52:48 +00:00

ulogd

SIGKILL ulogd on weave-npc exit