1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/libnetwork/drivers/bridge
Jacob Wen c348cebe99 Add a filter chain to allow persistent rules
Allow users to configure firewall policies in a way that persists
docker operations/restarts. Docker will not delete or modify any
pre-existing rules from the DOCKER-USER filter chain. This allows
the user to create in advance any rules required to further
restrict access from/to the containers.

Fixes docker/docker#29184
Fixes docker/docker#23987
Related to docker/docker#24848

Signed-off-by: Jacob Wen <jian.w.wen@oracle.com>
2017-05-16 10:24:56 +08:00
..
brmanager Adding manager pkg for swarm visible network drivers 2017-05-12 17:16:54 -07:00
bridge.go Add ConnectivityScope capability for network drivers along with scope network option 2017-05-12 17:16:34 -07:00
bridge_store.go Support for com.docker.network.bridge.container_interface_prefix label 2017-03-01 03:09:45 +01:00
bridge_test.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
errors.go Fix sanbox typo 2016-06-24 15:14:01 -07:00
interface.go Fix issue for --fixed-cidr when bridge has multiple addresses 2016-10-21 13:58:16 -07:00
interface_test.go Fix issue for --fixed-cidr when bridge has multiple addresses 2016-10-21 13:58:16 -07:00
labels.go Miscellaneous fixes 2016-03-08 15:49:47 -08:00
link.go Refactoring logrus import and formatting 2016-11-08 12:42:41 -07:00
link_test.go Use gofmt with -s instead of goimports 2016-02-12 14:07:00 +01:00
netlink_deprecated_linux.go Reorganize MAC generation functions 2015-07-30 11:06:16 -07:00
netlink_deprecated_linux_armppc64.go Adding ppc64le build tag to compile on IBM Power 2015-08-27 04:18:34 +00:00
netlink_deprecated_linux_notarm.go Revert "add s390x arch build info at the netlink_deprecated_linux bridge driver" 2016-09-09 18:04:45 +02:00
netlink_deprecated_unsupported.go Remove dependency on libcontainer 2015-07-16 13:26:26 -07:00
network_test.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
port_mapping.go Move exposed ports from Endpoint to Sandbox 2016-03-06 09:31:26 -08:00
port_mapping_test.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
setup.go
setup_bridgenetfiltering.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
setup_bridgenetfiltering_test.go
setup_device.go Migrate libnetwork to use netlink.Handle 2016-06-08 21:05:36 -07:00
setup_device_test.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
setup_firewalld.go Seperates the driver-specific and network-specific iptable operations 2015-08-04 17:26:41 -04:00
setup_ip_forwarding.go Refactoring logrus import and formatting 2016-11-21 11:53:07 -07:00
setup_ip_forwarding_test.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
setup_ip_tables.go Add a filter chain to allow persistent rules 2017-05-16 10:24:56 +08:00
setup_ip_tables_test.go Merge pull request #961 from JrCs/fix-iptables-order 2017-03-05 20:28:22 -08:00
setup_ipv4.go Remove unnecessary string formats 2016-11-22 09:29:53 +08:00
setup_ipv4_test.go Migrate libnetwork to use netlink.Handle 2016-06-08 21:05:36 -07:00
setup_ipv6.go Migrate libnetwork to use netlink.Handle 2016-06-08 21:05:36 -07:00
setup_ipv6_test.go Migrate libnetwork to use netlink.Handle 2016-06-08 21:05:36 -07:00
setup_verify.go Refactoring logrus import and formatting 2016-11-08 12:42:41 -07:00
setup_verify_test.go Migrate libnetwork to use netlink.Handle 2016-06-08 21:05:36 -07:00