From 43ded7c4e29600f09f6ca9683bfee99cb908756f Mon Sep 17 00:00:00 2001 From: Andrew Sy Kim Date: Thu, 2 May 2019 19:01:01 -0400 Subject: [PATCH] create new ipset KUBE-NODE-PORT-SCTP-HASH and KUBE-NODE-PORT-LOCAL-SCTP-HASH for ipvs proxier Signed-off-by: Andrew Sy Kim --- pkg/proxy/ipvs/ipset.go | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/pkg/proxy/ipvs/ipset.go b/pkg/proxy/ipvs/ipset.go index e449cc1ee3f..636c7c95282 100644 --- a/pkg/proxy/ipvs/ipset.go +++ b/pkg/proxy/ipvs/ipset.go @@ -65,11 +65,21 @@ const ( kubeNodePortLocalSetUDPComment = "Kubernetes nodeport UDP port with externalTrafficPolicy=local" kubeNodePortLocalSetUDP = "KUBE-NODE-PORT-LOCAL-UDP" - kubeNodePortSetSCTPComment = "Kubernetes nodeport SCTP port for masquerade purpose" - kubeNodePortSetSCTP = "KUBE-NODE-PORT-SCTP" + // This ipset is no longer active but still used in previous versions. + // DO NOT create an ipset using this name + legacyKubeNodePortSetSCTPComment = "Kubernetes nodeport SCTP port for masquerade purpose" + legacyKubeNodePortSetSCTP = "KUBE-NODE-PORT-SCTP" - kubeNodePortLocalSetSCTPComment = "Kubernetes nodeport SCTP port with externalTrafficPolicy=local" - kubeNodePortLocalSetSCTP = "KUBE-NODE-PORT-LOCAL-SCTP" + // This ipset is no longer active but still used in previous versions. + // DO NOT create an ipset using this name + legacyKubeNodePortLocalSetSCTPComment = "Kubernetes nodeport SCTP port with externalTrafficPolicy=local" + legacyKubeNodePortLocalSetSCTP = "KUBE-NODE-PORT-LOCAL-SCTP" + + kubeNodePortSetSCTPComment = "Kubernetes nodeport SCTP port for masquerade purpose with type 'hash ip:port'" + kubeNodePortSetSCTP = "KUBE-NODE-PORT-SCTP-HASH" + + kubeNodePortLocalSetSCTPComment = "Kubernetes nodeport SCTP port with externalTrafficPolicy=local with type 'hash ip:port'" + kubeNodePortLocalSetSCTP = "KUBE-NODE-PORT-LOCAL-SCTP-HASH" ) // IPSetVersioner can query the current ipset version.