-
Notifications
You must be signed in to change notification settings - Fork 751
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conntrack support #213
Conntrack support #213
Conversation
Looks like I will have to investigate the failure on Travis. |
6dfa8d0
to
f570540
Compare
- Conntrack table FLUSH - Conntrack table DELETE with filter The filter is only for IP field - Conntrack table GET The flow information is not complete, but the method returns a simplified structure with basic flow info Signed-off-by: Flavio Crisciani <flavio.crisciani@docker.com>
The issue was the missing modules in the kernel, added them into Travis file. |
Added tests for: Table FLUSH Table GET Table DELETE with filter Filter match Use a simple UDP client to create flows into the conntrack for testing purpose Each test will run in a separate network namespace so can run in parallel Added kernel module dependencies into the travis file Signed-off-by: Flavio Crisciani <flavio.crisciani@docker.com>
This looks good. I'm thinking we may need a conntrack_unspecified.go with NotImplemented calls so that projects build on non-linux environments? |
Enable compilation in non linux environments Signed-off-by: Flavio Crisciani <flavio.crisciani@docker.com>
Sure, let me take care of that |
@vishvananda done, should be ready to go now |
These 2 commits are introducing the support for netfilter conntrack into the library.
This PR is a dependency for the fix of the bug: moby/moby#8795
The first commit adds the logic to support the GET/FLUSH/DELETE of conntrack through netlink
The second commit adds a test on top