Merge pull request #120354 from aroradaman/proxy-conntrack-api

Add support for `nf_conntrack_tcp_be_liberal` sysctl to kube-proxy

Kubernetes-commit: 5d03ce7ae44a8dc9638b8b56c6aa552128f7c05f
This commit is contained in:
Kubernetes Publisher 2023-10-31 19:15:44 +01:00
commit a3cfa9683d
2 changed files with 6 additions and 2 deletions

View File

@ -93,6 +93,10 @@ type KubeProxyConntrackConfiguration struct {
// in CLOSE_WAIT state will remain in the conntrack
// table. (e.g. '60s'). Must be greater than 0 to set.
TCPCloseWaitTimeout *metav1.Duration `json:"tcpCloseWaitTimeout"`
// tcpBeLiberal, if true, kube-proxy will configure conntrack
// to run in liberal mode for TCP connections and packets with
// out-of-window sequence numbers won't be marked INVALID.
TCPBeLiberal bool `json:"tcpBeLiberal"`
// udpTimeout is how long an idle UDP conntrack entry in
// UNREPLIED state will remain in the conntrack table
// (e.g. '30s'). Must be greater than 0 to set.

4
go.mod
View File

@ -44,8 +44,8 @@ require (
)
replace (
k8s.io/api => k8s.io/api v0.0.0-20231027172135-b5946e690808
k8s.io/api => k8s.io/api v0.0.0-20231031013930-a9aa0dc09108
k8s.io/apimachinery => k8s.io/apimachinery v0.0.0-20231027171410-92fa50ee03b2
k8s.io/client-go => k8s.io/client-go v0.0.0-20231027173027-30eba26adb82
k8s.io/client-go => k8s.io/client-go v0.0.0-20231031051614-477cb782cf02
k8s.io/component-base => k8s.io/component-base v0.0.0-20231027174419-7eefecff8918
)