diff options
| author | Matthew Heon <matthew.heon@gmail.com> | 2018-09-09 13:16:34 -0400 |
|---|---|---|
| committer | Atomic Bot <atomic-devel@projectatomic.io> | 2018-09-10 18:53:27 +0000 |
| commit | 9405e3704fae9c30b24ad8807174639005b1db6c (patch) | |
| tree | 96d6c02662364c965aeecca8ced8b1deccc17f2d /vendor/github.com/coreos/go-iptables/README.md | |
| parent | 2afadeec6696fefac468a49c8ba24b0bc275aa75 (diff) | |
| download | podman-9405e3704fae9c30b24ad8807174639005b1db6c.tar.gz podman-9405e3704fae9c30b24ad8807174639005b1db6c.tar.bz2 podman-9405e3704fae9c30b24ad8807174639005b1db6c.zip | |
Vendor CNI plugins firewall code
The upstream CNI project has a PR open for adding iptables and
firewalld support, but this has been stalled for the better part
of a year upstream.
On advice of several maintainers, we are vendoring this code into
libpod, to perform the relevant firewall configuration ourselves.
Signed-off-by: Matthew Heon <matthew.heon@gmail.com>
Closes: #1431
Approved by: baude
Diffstat (limited to 'vendor/github.com/coreos/go-iptables/README.md')
| -rw-r--r-- | vendor/github.com/coreos/go-iptables/README.md | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/vendor/github.com/coreos/go-iptables/README.md b/vendor/github.com/coreos/go-iptables/README.md new file mode 100644 index 000000000..974a983e0 --- /dev/null +++ b/vendor/github.com/coreos/go-iptables/README.md @@ -0,0 +1,10 @@ +# go-iptables + +[](https://godoc.org/github.com/coreos/go-iptables/iptables) +[](https://travis-ci.org/coreos/go-iptables) + +Go bindings for iptables utility. + +In-kernel netfilter does not have a good userspace API. The tables are manipulated via setsockopt that sets/replaces the entire table. Changes to existing table need to be resolved by userspace code which is difficult and error-prone. Netfilter developers heavily advocate using iptables utlity for programmatic manipulation. + +go-iptables wraps invocation of iptables utility with functions to append and delete rules; create, clear and delete chains. |