1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/libnetwork/drivers/bridge
Vincent Bernat e5812117a5 bridge: also flush conntrack entries when setting up endpoints
There is a race condition between the local proxy and iptables rule
setting. When we have a lot of UDP traffic, the kernel will create
conntrack entries to the local proxy and will ignore the iptables
rules set after that.

Related to PR #32505. Fix #8795.

Signed-off-by: Vincent Bernat <vincent@bernat.ch>
2022-03-23 08:34:26 +01:00
..
brmanager Fix libnetwork imports 2021-06-01 21:51:23 +00:00
bridge.go bridge: also flush conntrack entries when setting up endpoints 2022-03-23 08:34:26 +01:00
bridge_store.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
bridge_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
errors.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
interface.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
interface_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
labels.go
link.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
link_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
netlink_deprecated_linux.go Fixup libnetwork lint errors 2021-06-01 23:48:32 +00:00
netlink_deprecated_linux_rawsockaddr_data_int8.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
netlink_deprecated_linux_rawsockaddr_data_uint8.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
netlink_deprecated_unsupported.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
network_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
port_mapping.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
port_mapping_test.go Fix flaky TestPortMappingV6Config 2021-11-16 09:37:34 +01:00
setup.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_bridgenetfiltering.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00
setup_bridgenetfiltering_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_device.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00
setup_device_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_firewalld.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_ip_forwarding.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00
setup_ip_forwarding_test.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00
setup_ip_tables.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_ip_tables_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_ipv4.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00
setup_ipv4_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_ipv6.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00
setup_ipv6_test.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00
setup_verify.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00
setup_verify_test.go Update to Go 1.17.0, and gofmt with Go 1.17 2021-08-24 23:33:27 +02:00