kilo/pkg
Lucas Servén Marín e83db17d88
pkg/iptables: add rules in correct order
This commit takes a big step towards ensuring that iptables rules are
always kept in the correct order. Specifically, when re-setting a a
ruleset, any time a rule is missing, that rule and all following rules
are re-added to ensure that from that index onwards all rules are in the
right order. Similarly, when reconciling an existing ruleset against the
backend, if a rule is missing, that rule an all following rules are
re-added.

This change does not guarantee that the order of rules in the backend
is correct. Unless an actor is modifying the order of rules in iptables,
all rules created by Kilo should now be kept in the correct order.

Fixes: #19
2019-09-25 13:23:31 +02:00
..
encapsulation manifests,pkg/encapsulation: Flannel compatibility 2019-05-14 01:01:58 +02:00
iproute pkg/{encapsulation,mesh}: abstract encapsulation 2019-05-13 18:30:03 +02:00
ipset init 2019-01-18 02:50:10 +01:00
iptables pkg/iptables: add rules in correct order 2019-09-25 13:23:31 +02:00
k8s pkg: allow overriding internal IP 2019-07-15 17:24:35 +02:00
mesh pkg/wireguard: allow specifying iface named 2019-09-24 16:05:10 +02:00
route pkg/route: filter invalid route updates 2019-09-24 16:13:14 +02:00
version init 2019-01-18 02:50:10 +01:00
wireguard pkg/wireguard: allow specifying iface named 2019-09-24 16:05:10 +02:00