mirror of https://github.com/containers/podman.git synced 2025-12-01 18:49:18 +08:00

Files

Matthew Heon 9405e3704f Vendor CNI plugins firewall code

The upstream CNI project has a PR open for adding iptables and
firewalld support, but this has been stalled for the better part
of a year upstream.

On advice of several maintainers, we are vendoring this code into
libpod, to perform the relevant firewall configuration ourselves.

Signed-off-by: Matthew Heon <matthew.heon@gmail.com>

Closes: #1431
Approved by: baude

2018-09-10 18:53:27 +00:00

iptables

Vendor CNI plugins firewall code

2018-09-10 18:53:27 +00:00

LICENSE

Vendor CNI plugins firewall code

2018-09-10 18:53:27 +00:00

NOTICE

Vendor CNI plugins firewall code

2018-09-10 18:53:27 +00:00

README.md

Vendor CNI plugins firewall code

2018-09-10 18:53:27 +00:00

README.md

go-iptables

Go bindings for iptables utility.

In-kernel netfilter does not have a good userspace API. The tables are manipulated via setsockopt that sets/replaces the entire table. Changes to existing table need to be resolved by userspace code which is difficult and error-prone. Netfilter developers heavily advocate using iptables utlity for programmatic manipulation.

go-iptables wraps invocation of iptables utility with functions to append and delete rules; create, clear and delete chains.