From 59d787ebe81f04572cc09ac96ef3ac6a661256c8 Mon Sep 17 00:00:00 2001 From: yanjianbo Date: Mon, 23 Oct 2023 16:40:47 +0800 Subject: [PATCH] Remove KUBE-POSTROUTING in cloud-agent rules Signed-off-by: yanjianbo --- pkg/cloud-agent/iptables.go | 2 -- 1 file changed, 2 deletions(-) diff --git a/pkg/cloud-agent/iptables.go b/pkg/cloud-agent/iptables.go index 0175152..d46168f 100644 --- a/pkg/cloud-agent/iptables.go +++ b/pkg/cloud-agent/iptables.go @@ -77,8 +77,6 @@ COMMIT *nat :FABEDGE-POSTROUTING - [0:0] -:KUBE-POSTROUTING - [0:0] - -A FABEDGE-POSTROUTING -m mark --mark 0x4000/0x4000 -j KUBE-POSTROUTING -A FABEDGE-POSTROUTING -m set --match-set {{ .RemotePodCIDR }} dst -j ACCEPT -A FABEDGE-POSTROUTING -m set --match-set {{ .RemotePodCIDR }} src -j ACCEPT