plugins/plugins
Or Mergi 7c122fabb4 bridge: Add option to enable port isolation
Enable bridge CNI plugin setting port-isolation [1] the interface.
When port-isolation is enabled, containers connected to the network
cannot communicate with each other over the linux-bridge.
Communication will be enable depending on the gateway appliance according
to its restrictions / policies.

For example: in a scenario the env connected to smart switch, enabling
port-isolation ensure traffic will go outbound, allowing the
smart-switch routing the traffic according to policies.

Add "portIsolation" flag to bridge plugin.
When true, configure the node interface with port-isolation [1].
Default is false.

[1] https://man7.org/linux/man-pages/man8/bridge.8.html (see "isolated" option)

Signed-off-by: Or Mergi <ormergi@redhat.com>
2025-01-29 16:10:47 +01:00
..
ipam feat(dhcp): Cancel backoff retry on stop 2024-10-14 17:42:30 +02:00
main bridge: Add option to enable port isolation 2025-01-29 16:10:47 +01:00
meta portmap: fix iptables conditions detection 2024-12-02 17:06:11 +01:00
sample Pass status along ipam update 2024-10-15 10:22:10 +02:00
linux_only.txt dummy: Create a Dummy CNI plugin that creates a virtual interface. 2022-08-11 13:50:37 +01:00
windows_only.txt plugins: remove flannel 2021-06-02 17:38:32 +02:00