• Benjamin Bennett's avatar
    Userspace proxy should remove conntrack entries · 5447db30
    Benjamin Bennett authored
    This changes the userspace proxy so that it cleans up its conntrack
    settings when a service is removed (as the iptables proxy already
    does).  This could theoretically cause problems when a UDP service
    as deleted and recreated quickly (with the same IP address).  As
    long as packets from the same UDP source IP and port were going to
    the same destination IP and port, the the conntrack would apply and
    the packets would be sent to the old destination.
    
    This is astronomically unlikely if you did not specify the IP address
    to use in the service, and even then, only happens with an "established"
    UDP connection.  However, in cases where a service could be "switched"
    between using the iptables proxy and the userspace proxy, this case
    becomes much more frequent.
    5447db30
Name
Last commit
Last update
..
BUILD Loading commit data...
conntrack.go Loading commit data...
conntrack_test.go Loading commit data...