4 Commits (9bfa9afb5a2a05ba17fc84b8804c57b9b36ee868)

Author	SHA1	Message	Date
Daniel Nephin	510d81ac4d	Merge pull request #10253 from hashicorp/dnephin/fix-test-flake ... redirecttraffic: fix a flaky test	2021-05-19 15:01:53 +00:00
Iryna Shustava	47d8f050d2	Save exposed ports in agent's store and expose them via API (#10173) ... * Save exposed HTTP or GRPC ports to the agent's store * Add those the health checks API so we can retrieve them from the API * Change redirect-traffic command to also exclude those ports from inbound traffic redirection when expose.checks is set to true.	2021-05-12 20:56:15 +00:00
Iryna Shustava	f383452e87	Implement traffic redirection exclusion based on proxy config and user-provided values (#10134) ... * Use proxy outbound port from TransparentProxyConfig if provided * If -proxy-id is provided to the redirect-traffic command, exclude any listener ports from inbound traffic redirection. This includes envoy_prometheus_bind_addr, envoy_stats_bind_addr, and the ListenerPort from the Expose configuration. * Allow users to provide additional inbound and outbound ports, outbound CIDRs and additional user IDs to be excluded from traffic redirection. This affects both the traffic-redirect command and the iptables SDK package.	2021-04-29 16:24:15 +00:00
Iryna Shustava	5755c97bc7	cli: Add new `consul connect redirect-traffic` command for applying traffic redirection rules when Transparent Proxy is enabled. (#9910) ... * Add new consul connect redirect-traffic command for applying traffic redirection rules when Transparent Proxy is enabled. * Add new iptables package for applying traffic redirection rules with iptables.	2021-04-09 11:48:10 -07:00