Martynas Pumputis c742ec4993 npc: Enable ipBlock for Ingress policy ...

When using ipBlock in Ingress policy, one should be aware
that source IP addr of packet destined to Pod in many cases
is mangled, see docs/k8s-src-ip.md for the cases.

However, the mangling in some cases can be prevented with
setting externalTrafficPolicy to Local.

2018-08-03 13:21:45 +02:00

..

iptables

Refactor iptables usage in weave-npc to make it testable

2017-07-14 14:45:41 +01:00

metrics

Change rest of npc to weave common logging

2016-12-13 13:52:48 +00:00

ulogd

SIGKILL ulogd on weave-npc exit

2017-01-11 14:12:01 +00:00

analyser.go

npc: Enable ipBlock for Ingress policy

2018-08-03 13:21:45 +02:00

betatypes.go

Import from weave-npc repo

2016-11-02 11:28:59 +00:00

constants.go

npc: Add WEAVE-NPC-EGRESS-ACCEPT chain

2018-07-24 10:06:23 +02:00

controller_test.go

npc: Add ns name into ipBlock ipset name

2018-07-24 10:06:55 +02:00

controller.go

npc: Get rid of the legacy netpol

2018-07-24 10:06:55 +02:00

ipblock.go

npc: Add ns name into ipBlock ipset name

2018-07-24 10:06:55 +02:00

json.go

Trim the JSON logged for Kubernetes objects by weave-npc

2017-11-22 11:17:50 +00:00

namespace.go

npc: Get rid of the legacy netpol

2018-07-24 10:06:55 +02:00

rule_test.go

npc: Rename policy{Ingress,Egress} to policyType{Ingress,Egress}

2018-07-24 10:06:23 +02:00

rule.go

npc: Replace isNil by reflect.IsNil

2018-07-24 10:06:23 +02:00

selector.go

npc: Replace isNil by reflect.IsNil

2018-07-24 10:06:23 +02:00

shortname.go

fix(npc): create ipsets with only valid xml characters

2017-05-15 11:20:04 +01:00

types.go

npc: Rename policy{Ingress,Egress} to policyType{Ingress,Egress}

2018-07-24 10:06:23 +02:00