diff options
author | David Gibson <david@gibson.dropbear.id.au> | 2023-11-15 16:25:34 +1100 |
---|---|---|
committer | Stefano Brivio <sbrivio@redhat.com> | 2023-11-19 09:08:39 +0100 |
commit | 457ff122e33cf6a6e559b073f41c530e42d9c597 (patch) | |
tree | d15cc8c40cb50cba4c1d2d7e756c95bc40b41a7a /passt.1 | |
parent | 4ccdeecb744d48e0c70386d561d34ced860bfacd (diff) | |
download | passt-457ff122e33cf6a6e559b073f41c530e42d9c597.tar passt-457ff122e33cf6a6e559b073f41c530e42d9c597.tar.gz passt-457ff122e33cf6a6e559b073f41c530e42d9c597.tar.bz2 passt-457ff122e33cf6a6e559b073f41c530e42d9c597.tar.lz passt-457ff122e33cf6a6e559b073f41c530e42d9c597.tar.xz passt-457ff122e33cf6a6e559b073f41c530e42d9c597.tar.zst passt-457ff122e33cf6a6e559b073f41c530e42d9c597.zip |
udp,pasta: Periodically scan for ports to automatically forward
pasta supports automatic port forwarding, where we look for listening
sockets in /proc/net (in both namespace and outside) and establish port
forwarding to match.
For TCP we do this scan both at initial startup, then periodically
thereafter. For UDP however, we currently only scan at start. So unlike
TCP we won't update forwarding to handle services that start after pasta
has begun.
There's no particular reason for that, other than that we didn't implement
it. So, remove that difference, by scanning for new UDP forwards
periodically too. The logic is basically identical to that for TCP, but it
needs some changes to handle the mildly different data structures in the
UDP case.
Link: https://bugs.passt.top/show_bug.cgi?id=45
Link: https://github.com/rootless-containers/rootlesskit/issues/383
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'passt.1')
-rw-r--r-- | passt.1 | 3 |
1 files changed, 1 insertions, 2 deletions
@@ -496,8 +496,7 @@ Default is \fBauto\fR. .BR \-u ", " \-\-udp-ports " " \fIspec Configure UDP port forwarding to namespace. \fIspec\fR is as described for TCP above, and the list of ports is derived from listening sockets reported by -\fI/proc/net/udp\fR and \fI/proc/net/udp6\fR, see \fBproc\fR(5), -when \fBpasta\fR starts (not periodically). +\fI/proc/net/udp\fR and \fI/proc/net/udp6\fR, see \fBproc\fR(5). Note: unless overridden, UDP ports with numbers corresponding to forwarded TCP port numbers are forwarded too, without, however, any port translation. |