gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-06-05	iptables: loopback traffic skips prerouting chain	Kevin Krakauer
	Loopback traffic is not affected by rules in the PREROUTING chain. This change is also necessary for istio's envoy to talk to other components in the same pod.
2020-05-01	Support for connection tracking of TCP packets.	Nayana Bidari
	Connection tracking is used to track packets in prerouting and output hooks of iptables. The NAT rules modify the tuples in connections. The connection tracking code modifies the packets by looking at the modified tuples.
2020-03-16	Merge pull request #1943 from kevinGC:ipt-filter-ip	gVisor bot
	PiperOrigin-RevId: 301197007
2020-03-11	iptables: ready tests to be enabled in kokoro	Kevin Krakauer
	Fixed flakes (tested via --runs_per_test=100) and added skips for not-yet-implemented features. Once submitted, the iptables tests will be ready to enable in kokoro.
2020-02-26	iptables: filter by IP address (and range)	Kevin Krakauer
	Enables commands such as: $ iptables -A INPUT -d 127.0.0.1 -j ACCEPT $ iptables -t nat -A PREROUTING ! -d 127.0.0.1 -j REDIRECT Also adds a bunch of REDIRECT+destination tests.
2020-02-25	Add nat table support for iptables.	Nayana Bidari
	- commit the changes for the comments.
2020-02-18	iptables: use "-t nat" for NAT tests	gVisor bot
	PiperOrigin-RevId: 295835807
2020-02-18	Add nat table support for iptables.	Nayana Bidari
	Add nat table support for Prerouting hook with Redirect option. Add tests to check redirect of ports.
2020-01-17	Merge pull request #1541 from nybidari:iptables	gVisor bot
	PiperOrigin-RevId: 290273561
2020-01-10	Add tests for redirect port	Nayana Bidari
	Fix indentation and change function names.
2020-01-09	Add test for redirect port	Nayana Bidari
	Fix the indentation and print statements. Moved the NAT redirect tests to new file. Added negative test to check redirect rule on ports other than redirected port.