Dan Winship 00f789cd8d proxy/iptables: move EXT chain rule creation to the end ...

Part of reorganizing the syncProxyRules loop to do:
  1. figure out what chains are needed, mark them in activeNATChains
  2. write servicePort jump rules to KUBE-SERVICES/KUBE-NODEPORTS
  3. write servicePort-specific chains (SVC, SVL, EXT, FW, SEP)

This fixes the handling of the EXT chain.

2022-07-09 07:07:47 -04:00

..

number_generated_rules_test.go

kube-proxy iptables test number of generated iptables rules

2022-06-14 11:55:42 +02:00

OWNERS

Check in OWNERS modified by update-yamlfmt.sh

2021-12-09 21:31:26 -05:00

proxier_test.go

proxy/iptables: Don't use KUBE-MARK-DROP for "no local endpoints"

2022-06-29 16:37:24 -04:00

proxier.go

proxy/iptables: move EXT chain rule creation to the end

2022-07-09 07:07:47 -04:00