search

kubernetes-sigs / ip-masq-agent

Manage IP masquerade on nodes
Apache License 2.0
217 stars 70 forks source link

Add support to ip-masq-agent to avoid masquerading any RFC reserved range by default #33

Closed varunmar closed 5 years ago

varunmar commented 5 years ago

Adds a startup flag to change the default nonMasqueradeCidrs from the RFC1918 ranges to all reserved ranges when the configMap has no nonMasqueradeCidrs key. The flag is defaulted to false, which maintains the current behavior.

The full list of reserved ranges are 10.0.0.0/8: RFC 1918 172.16.0.0/12: RFC 1918 192.168.0.0/16: RFC 1918 100.64.0.0/10: RFC 6598 192.0.0.0/24: RFC 6890 192.0.2.0/24: RFC 5737 192.88.99.0/24: RFC 7526 198.18.0.0/15: RFC 2544 203.0.113.0/24: RFC 5737 240.0.0.0/4: Former Class E range obsoleted by RFC 3232

varunmar commented 5 years ago

/assign @bowei @MrHohn

k8s-ci-robot commented 5 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: MrHohn, varunmar

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes-incubator/ip-masq-agent/blob/master/OWNERS)~~ [MrHohn] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment