From 24b639307e263525fec4de87801fe37a5972fdda Mon Sep 17 00:00:00 2001 From: Yaroslav Skopets Date: Sun, 17 Feb 2019 18:54:50 +0100 Subject: [PATCH] Add Netfilter `xt_socket` module to complete support for Transparent Proxying (TPROXY) According to Kernel documentation, support for Transparent Proxying (TPROXY) requires 2 Netfilter modules to be installed: `xt_TPROXY` and `xt_socket`. So far, Minikube had only `xt_TPROXY`. See https://www.kernel.org/doc/Documentation/networking/tproxy.txt --- deploy/iso/minikube-iso/board/coreos/minikube/linux_defconfig | 3 +++ 1 file changed, 3 insertions(+) diff --git a/deploy/iso/minikube-iso/board/coreos/minikube/linux_defconfig b/deploy/iso/minikube-iso/board/coreos/minikube/linux_defconfig index e1e4f905ae11..311e798f68d4 100644 --- a/deploy/iso/minikube-iso/board/coreos/minikube/linux_defconfig +++ b/deploy/iso/minikube-iso/board/coreos/minikube/linux_defconfig @@ -123,6 +123,8 @@ CONFIG_NF_CONNTRACK_SANE=m CONFIG_NF_CONNTRACK_SIP=m CONFIG_NF_CONNTRACK_TFTP=m CONFIG_NF_CT_NETLINK=m +CONFIG_NF_SOCKET_IPV4=m +CONFIG_NF_SOCKET_IPV6=m CONFIG_NETFILTER_XT_SET=m CONFIG_NETFILTER_XT_TARGET_CHECKSUM=m CONFIG_NETFILTER_XT_TARGET_CLASSIFY=m @@ -181,6 +183,7 @@ CONFIG_NETFILTER_XT_MATCH_RATEEST=m CONFIG_NETFILTER_XT_MATCH_REALM=m CONFIG_NETFILTER_XT_MATCH_RECENT=m CONFIG_NETFILTER_XT_MATCH_SCTP=m +CONFIG_NETFILTER_XT_MATCH_SOCKET=m CONFIG_NETFILTER_XT_MATCH_STATE=m CONFIG_NETFILTER_XT_MATCH_STATISTIC=m CONFIG_NETFILTER_XT_MATCH_STRING=m