gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-01-13	Add test for iptables TCP rule	Nayana Bidari
	Added tests for tcp protocol with input and output rules including options sport and dport Increased timeout in iptables_test as TCP tests were timing out with existing value.
2020-01-10	Add tests for redirect port	Nayana Bidari
	Fix indentation and change function names.
2020-01-09	Add test for redirect port	Nayana Bidari
	Fix the indentation and print statements. Moved the NAT redirect tests to new file. Added negative test to check redirect rule on ports other than redirected port.
2020-01-09	Add test to check iptables redirect port rule	Nayana Bidari

2020-01-06	Fix readme formatting.	Kevin Krakauer
	PiperOrigin-RevId: 288402480
2019-12-17	Internal change.	Kevin Krakauer
	PiperOrigin-RevId: 286083614
2019-12-12	Add iptables testing framework.	Kevin Krakauer
	It would be preferrable to test iptables via syscall tests, but there are some problems with that approach: * We're limited to loopback-only, as syscall tests involve only a single container. Other link interfaces (e.g. fdbased) should be tested. * We'd have to shell out to call iptables anyways, as the iptables syscall interface itself is too large and complex to work with alone. * Running the Linux/native version of the syscall test will require root, which is a pain to configure, is inherently unsafe, and could leave host iptables misconfigured. Using the go_test target allows there to be no new test runner. PiperOrigin-RevId: 285274275