-
Notifications
You must be signed in to change notification settings - Fork 2.8k
feat: support iptables firewall control #10826
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
|
Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
基本在自己的纯净 debian 上(无 ufw/ firewalld)测试好了当前的所有功能,前端还在想怎么排版 |
|
草稿迁移到 #10881 |
草稿 Feature,仍然需要讨论和测试
What this PR does / why we need it?
Debian系统不会预装ufw或者firewalld,并且有些云厂商系统与ufw可能会产生冲突。
直接控制Iptables来完成防火墙的管理,无需依赖ufw或firewalld。且防火墙启用和禁用不影响 docker 链条,不需要重启 docker
Summary of your change
Please indicate you've done the following: