From 4f7fa01730cd3379a5d25337dd81916e6e5780f9 Mon Sep 17 00:00:00 2001 From: Roberto Bonafiglia Date: Wed, 12 Jan 2022 17:09:38 +0100 Subject: [PATCH] Added iptables masquerade rules for ipv6 on flannel Signed-off-by: Roberto Bonafiglia --- pkg/agent/flannel/flannel.go | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/pkg/agent/flannel/flannel.go b/pkg/agent/flannel/flannel.go index 200b8add89..d2f93279ed 100644 --- a/pkg/agent/flannel/flannel.go +++ b/pkg/agent/flannel/flannel.go @@ -71,6 +71,11 @@ func flannel(ctx context.Context, flannelIface *net.Interface, flannelConf, kube go network.SetupAndEnsureIPTables(network.MasqRules(config.Network, bn.Lease()), 60) go network.SetupAndEnsureIPTables(network.ForwardRules(config.Network.String()), 50) + if config.IPv6Network.String() != emptyIPv6Network { + go network.SetupAndEnsureIP6Tables(network.MasqIP6Rules(config.IPv6Network, bn.Lease()), 60) + go network.SetupAndEnsureIP6Tables(network.ForwardRules(config.IPv6Network.String()), 50) + } + if err := WriteSubnetFile(subnetFile, config.Network, config.IPv6Network, true, bn); err != nil { // Continue, even though it failed. log.Warningf("Failed to write subnet file: %s", err)