0f0b0bda13
because of the way the iptables rules are reconciled, having the encapsulation rules at the end of the slice of rules results in them being deleted and re-added many times, even though they are very static. Prepending them to the slice of rules prevents this from happening, making that iptables chain more stable and saving a bunch of roundtrips to iptables. |
||
---|---|---|
.. | ||
backend.go | ||
cni.go | ||
discoverips.go | ||
graph.go | ||
ip_test.go | ||
ip.go | ||
mesh_test.go | ||
mesh.go | ||
routes_test.go | ||
routes.go | ||
topology_test.go | ||
topology.go |