This means we only filter connections at the destination end, which is a better match for the ingress-only rules.
14 lines
223 B
Go
14 lines
223 B
Go
package npc
|
|
|
|
const (
|
|
TableFilter = "filter"
|
|
|
|
MainChain = "WEAVE-NPC"
|
|
DefaultChain = "WEAVE-NPC-DEFAULT"
|
|
IngressChain = "WEAVE-NPC-INGRESS"
|
|
|
|
IpsetNamePrefix = "weave-"
|
|
|
|
LocalIpset = IpsetNamePrefix + "local-pods"
|
|
)
|