mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
344b093258
full diffs: -fc5a7d91d5...62a13ae87c-b2de5d10e3...v1.0.0 -604eaf189e...13995c7128ccc8e51e9a6bd2b551020a27180abd notable changes in libnetwork: - docker/libnetwork#2366 Bump vishvananda/netlink to 1.0.0 - docker/libnetwork#2339 controller: Check if IPTables is enabled for arrangeUserFilterRule - addresses docker/libnetwork#2158 dockerd when run with --iptables=false modifies iptables by adding DOCKER-USER - addresses moby/moby#35777 With iptables=false dockerd still creates DOCKER-USER chain and rules - addresses docker/for-linux#136 dockerd --iptables=false adds DOCKER-USER chain and modify FORWARD chain anyway - docker/libnetwork#2394 Make DNS records and queries case-insensitive - addresses moby/moby#28689 Embedded DNS is case-sensitive - addresses moby/moby#21169 hostnames with new networking are case-sensitive Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
78 lines
1.7 KiB
Go
78 lines
1.7 KiB
Go
package nl
|
|
|
|
// syscall package lack of rule atributes type.
|
|
// Thus there are defined below
|
|
const (
|
|
FRA_UNSPEC = iota
|
|
FRA_DST /* destination address */
|
|
FRA_SRC /* source address */
|
|
FRA_IIFNAME /* interface name */
|
|
FRA_GOTO /* target to jump to (FR_ACT_GOTO) */
|
|
FRA_UNUSED2
|
|
FRA_PRIORITY /* priority/preference */
|
|
FRA_UNUSED3
|
|
FRA_UNUSED4
|
|
FRA_UNUSED5
|
|
FRA_FWMARK /* mark */
|
|
FRA_FLOW /* flow/class id */
|
|
FRA_TUN_ID
|
|
FRA_SUPPRESS_IFGROUP
|
|
FRA_SUPPRESS_PREFIXLEN
|
|
FRA_TABLE /* Extended table id */
|
|
FRA_FWMASK /* mask for netfilter mark */
|
|
FRA_OIFNAME
|
|
)
|
|
|
|
// ip rule netlink request types
|
|
const (
|
|
FR_ACT_UNSPEC = iota
|
|
FR_ACT_TO_TBL /* Pass to fixed table */
|
|
FR_ACT_GOTO /* Jump to another rule */
|
|
FR_ACT_NOP /* No operation */
|
|
FR_ACT_RES3
|
|
FR_ACT_RES4
|
|
FR_ACT_BLACKHOLE /* Drop without notification */
|
|
FR_ACT_UNREACHABLE /* Drop with ENETUNREACH */
|
|
FR_ACT_PROHIBIT /* Drop with EACCES */
|
|
)
|
|
|
|
// socket diags related
|
|
const (
|
|
SOCK_DIAG_BY_FAMILY = 20 /* linux.sock_diag.h */
|
|
TCPDIAG_NOCOOKIE = 0xFFFFFFFF /* TCPDIAG_NOCOOKIE in net/ipv4/tcp_diag.h*/
|
|
)
|
|
|
|
const (
|
|
AF_MPLS = 28
|
|
)
|
|
|
|
const (
|
|
RTA_NEWDST = 0x13
|
|
RTA_ENCAP_TYPE = 0x15
|
|
RTA_ENCAP = 0x16
|
|
)
|
|
|
|
// RTA_ENCAP subtype
|
|
const (
|
|
MPLS_IPTUNNEL_UNSPEC = iota
|
|
MPLS_IPTUNNEL_DST
|
|
)
|
|
|
|
// light weight tunnel encap types
|
|
const (
|
|
LWTUNNEL_ENCAP_NONE = iota
|
|
LWTUNNEL_ENCAP_MPLS
|
|
LWTUNNEL_ENCAP_IP
|
|
LWTUNNEL_ENCAP_ILA
|
|
LWTUNNEL_ENCAP_IP6
|
|
LWTUNNEL_ENCAP_SEG6
|
|
LWTUNNEL_ENCAP_BPF
|
|
)
|
|
|
|
// routing header types
|
|
const (
|
|
IPV6_SRCRT_STRICT = 0x01 // Deprecated; will be removed
|
|
IPV6_SRCRT_TYPE_0 = 0 // Deprecated; will be removed
|
|
IPV6_SRCRT_TYPE_2 = 2 // IPv6 type 2 Routing Header
|
|
IPV6_SRCRT_TYPE_4 = 4 // Segment Routing with IPv6
|
|
)
|