Commit 0e6f0736 authored by Hong Zhiguo's avatar Hong Zhiguo

ipvs: remove duplicated masq rules

Duplicated masq rules are created by current implementation: -A KUBE-NODE-PORT -m comment --comment "mark MASQ for externaltrafficpolicy=cluster" -j KUBE-MARK-MASQ -A KUBE-NODE-PORT -j KUBE-MARK-MASQ The last one is always there. So the one inside if statement could just be removed.
parent 24ab69d3
...@@ -1283,13 +1283,6 @@ func (proxier *Proxier) writeIptablesRules() { ...@@ -1283,13 +1283,6 @@ func (proxier *Proxier) writeIptablesRules() {
) )
writeLine(proxier.natRules, append(args, "-j", "ACCEPT")...) writeLine(proxier.natRules, append(args, "-j", "ACCEPT")...)
} }
// mark masq for others
args = append(args[:0],
"-A", string(KubeNodePortChain),
"-m", "comment", "--comment",
fmt.Sprintf(`"mark MASQ for externaltrafficpolicy=cluster"`),
)
writeLine(proxier.natRules, append(args, "-j", string(KubeMarkMasqChain))...)
} }
// mark masq for KUBE-NODE-PORT // mark masq for KUBE-NODE-PORT
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment