Skip to content

Collect iptables -nvL -t mangle by support script#304

Merged
mogren merged 1 commit intoaws:masterfrom
nak3:mangle-script
Jan 30, 2019
Merged

Collect iptables -nvL -t mangle by support script#304
mogren merged 1 commit intoaws:masterfrom
nak3:mangle-script

Conversation

@nak3
Copy link
Copy Markdown
Contributor

@nak3 nak3 commented Jan 30, 2019

Description of changes:

aws-k8s-agent adds iptables for CONNMARK target to magle table.

e.g

# iptables -nvL -t mangle 
Chain PREROUTING (policy ACCEPT 25324 packets, 8496K bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 CONNMARK   all  --  ens5   *       0.0.0.0/0            0.0.0.0/0            /* AWS, primary ENI */ ADDRTYPE match dst-type LOCAL limit-in CONNMARK or 0x80
    0     0 CONNMARK   all  --  eni+   *       0.0.0.0/0            0.0.0.0/0            /* AWS, primary ENI */ CONNMARK restore mask 0x80

To collect mangle tables info, this patch adds iptables -nvL -t mangle
to aws-cni-support.sh.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

aws-k8s-agent adds iptables for CONNMARK target to magle table.

To collect mangle tables info, this patch adds `iptables -nvL -t mangle`
to aws-cni-support.sh.
Copy link
Copy Markdown
Contributor

@mogren mogren left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, good addition.

@mogren mogren merged commit 646c120 into aws:master Jan 30, 2019
@nak3 nak3 deleted the mangle-script branch January 31, 2019 02:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants