adelorenzo/kilo
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

prepend encapsulation rules to reduce number of reconciliation thereof

Browse Source 
because of the way the iptables rules are reconciled, having the encapsulation
rules at the end of the slice of rules results in them being deleted and re-added
many times, even though they are very static. Prepending them to the slice of
rules prevents this from happening, making that iptables chain more stable
and saving a bunch of roundtrips to iptables.
This commit is contained in:
Clive Jevons 2022-06-29 10:16:07 +02:00
parent 37b3cf1fc8
commit 0f0b0bda13
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/mesh/mesh.go
View File

@ -516,7 +516,9 @@ func (m *Mesh) applyTopology() {
break break
} }
} }
ipRules = append(ipRules, m.enc.Rules(cidrs)...)
ipRules = append(m.enc.Rules(cidrs), ipRules...)
// If we are handling local routes, ensure the local // If we are handling local routes, ensure the local
// tunnel has an IP address. // tunnel has an IP address.
if err := m.enc.Set(oneAddressCIDR(newAllocator(*nodes[m.hostname].Subnet).next().IP)); err != nil { if err := m.enc.Set(oneAddressCIDR(newAllocator(*nodes[m.hostname].Subnet).next().IP)); err != nil {