github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-20 18:31:15 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #92860 from aojea/iptMonitor

Browse Source 
iptables: don't do reverse DNS lookups
This commit is contained in:
Kubernetes Prow Robot 2020-07-11 20:57:02 -07:00 committed by GitHub
commit fa31f9fd26
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/util/iptables/iptables.go
View File

@ -607,6 +607,9 @@ func (runner *runner) chainExists(table Table, chain Chain) (bool, error) {
runner.mu.Lock() runner.mu.Lock()
defer runner.mu.Unlock() defer runner.mu.Unlock()
trace := utiltrace.New("iptables Monitor CANARY check")
defer trace.LogIfLong(2 * time.Second)
_, err := runner.run(opListChain, fullArgs) _, err := runner.run(opListChain, fullArgs)
return err == nil, err return err == nil, err
} }
@ -617,7 +620,7 @@ const (
opCreateChain operation = "-N" opCreateChain operation = "-N"
opFlushChain operation = "-F" opFlushChain operation = "-F"
opDeleteChain operation = "-X" opDeleteChain operation = "-X"
opListChain operation = "-L" opListChain operation = "-S"
opAppendRule operation = "-A" opAppendRule operation = "-A"
opCheckRule operation = "-C" opCheckRule operation = "-C"
opDeleteRule operation = "-D" opDeleteRule operation = "-D"