upstream/kubernetes
1
0
Fork 0
mirror of https://github.com/kubernetes/kubernetes.git synced 2026-03-16 07:33:03 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions
kubernetes/pkg/proxy/util
History
Antonio Ojea 8b5fa408e0 kube-proxy: only set route_localnet if required 
kube-proxy sets the sysctl net.ipv4.conf.all.route_localnet=1
so NodePort services can be accessed on the loopback addresses in
IPv4, but this may present security issues.

Leverage the --nodeport-addresses flag to opt-out of this feature,
if the list is not empty and none of the IP ranges contains an IPv4
loopback address this sysctl is not set.

In addition, add a warning to inform users about this behavior.
2022-02-17 20:20:31 +01:00
..
iptables Migrate pkg/proxy/util to structured logging (#104908) 2021-09-20 13:54:35 -07:00
testing reduce cpu usage of kube-proxy with iptables mode 2021-07-05 16:08:19 +08:00
endpoints.go proxy/iptables: Remove unnecessary /32 and /128 in iptables rules 2021-11-09 09:32:50 -05:00
endpoints_test.go proxy/iptables: Remove unnecessary /32 and /128 in iptables rules 2021-11-09 09:32:50 -05:00
network.go reduce cpu usage of kube-proxy with iptables mode 2021-07-05 16:08:19 +08:00
utils.go kube-proxy: only set route_localnet if required 2022-02-17 20:20:31 +01:00
utils_test.go kube-proxy: only set route_localnet if required 2022-02-17 20:20:31 +01:00