diff options
| author | Kevin Krakauer <krakauer@google.com> | 2020-06-03 19:57:39 -0700 |
|---|---|---|
| committer | Kevin Krakauer <krakauer@google.com> | 2020-06-05 16:43:50 -0700 |
| commit | 74a7d76c9777820fcd7bd6002481eb959f58e247 (patch) | |
| tree | e41c17d207f421e83b803abeee0d7e1717924e63 /test/iptables/iptables_test.go | |
| parent | d3a8bffe04595910714ec67231585bc33dab2b5b (diff) | |
iptables: loopback traffic skips prerouting chain
Loopback traffic is not affected by rules in the PREROUTING chain.
This change is also necessary for istio's envoy to talk to other
components in the same pod.
Diffstat (limited to 'test/iptables/iptables_test.go')
| -rw-r--r-- | test/iptables/iptables_test.go | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/test/iptables/iptables_test.go b/test/iptables/iptables_test.go index 172ad9e16..38319a3b2 100644 --- a/test/iptables/iptables_test.go +++ b/test/iptables/iptables_test.go @@ -303,6 +303,10 @@ func TestNATRedirectRequiresProtocol(t *testing.T) { singleTest(t, NATRedirectRequiresProtocol{}) } +func TestNATLoopbackSkipsPrerouting(t *testing.T) { + singleTest(t, NATLoopbackSkipsPrerouting{}) +} + func TestInputSource(t *testing.T) { singleTest(t, FilterInputSource{}) } |