gvisor/pkg/tcpip/stack
Toshi Kikuchi d1edabdca0 iptables: support postrouting hook and SNAT target
The current SNAT implementation has several limitations:
- SNAT source port has to be specified. It is not optional.
- SNAT source port range is not supported.
- SNAT for UDP is a one-way translation. No response packets
  are handled (because conntrack doesn't support UDP currently).
- SNAT and REDIRECT can't work on the same connection.

Fixes #5489

PiperOrigin-RevId: 367750325
2021-04-09 21:11:26 -07:00
..
BUILD iptables: support postrouting hook and SNAT target 2021-04-09 21:11:26 -07:00
addressable_endpoint_state.go Change tcpip.Error to an interface 2021-01-28 17:59:58 -08:00
addressable_endpoint_state_test.go Track join count in multicast group protocol state 2020-12-01 07:52:40 -08:00
conntrack.go iptables: support postrouting hook and SNAT target 2021-04-09 21:11:26 -07:00
forwarding_test.go Unexpose immutable fields in stack.Route 2021-03-24 09:38:27 -07:00
headertype_string.go Migrate to PacketHeader API for PacketBuffer. 2020-08-13 13:08:57 -07:00
hook_string.go iptables: support postrouting hook and SNAT target 2021-04-09 21:11:26 -07:00
icmp_rate_limit.go Simplify ICMPRateLimiter 2019-09-24 09:50:51 -07:00
iptables.go iptables: support postrouting hook and SNAT target 2021-04-09 21:11:26 -07:00
iptables_state.go garbage collect connections 2020-07-13 12:00:46 -07:00
iptables_targets.go iptables: support postrouting hook and SNAT target 2021-04-09 21:11:26 -07:00
iptables_types.go Move Name() out of netstack Matcher. It can live in the sentry. 2021-02-17 18:24:34 -08:00
ndp_test.go Join all routers group when forwarding is enabled 2021-04-08 09:49:59 -07:00
neighbor_cache.go Plumb link address request errors up to requester 2021-03-02 11:58:12 -08:00
neighbor_cache_test.go Assert UpdatedAtNanos in neighbor cache tests 2021-03-03 12:26:30 -08:00
neighbor_entry.go Plumb link address request errors up to requester 2021-03-02 11:58:12 -08:00
neighbor_entry_test.go Assert UpdatedAtNanos in neighbor cache tests 2021-03-03 12:26:30 -08:00
neighborstate_string.go Remove deprecated NUD types Failed and FailedEntryLookups 2021-02-18 11:40:52 -08:00
nic.go Do not call into Stack from LinkAddressRequest 2021-03-16 10:29:49 -07:00
nic_test.go Unexpose NIC 2021-02-06 09:49:14 -08:00
nud.go Hide neighbor table kind from NetworkEndpoint 2021-01-31 10:03:46 -08:00
nud_test.go Remove linkAddrCache 2021-02-06 21:37:15 -08:00
packet_buffer.go iptables: support postrouting hook and SNAT target 2021-04-09 21:11:26 -07:00
packet_buffer_test.go Make dedicated methods for data operations in PacketBuffer 2021-03-03 16:05:16 -08:00
packet_buffer_unsafe.go Make fragmentation return a reassembled PacketBuffer 2021-01-29 17:37:29 -08:00
pending_packets.go Plumb link address request errors up to requester 2021-03-02 11:58:12 -08:00
rand.go Add support for setting TCP segment hash. 2020-03-24 15:34:43 -07:00
registration.go Do not call into Stack from LinkAddressRequest 2021-03-16 10:29:49 -07:00
route.go Rename IsV6LinkLocalAddress to IsV6LinkLocalUnicastAddress 2021-04-09 13:23:01 -07:00
stack.go Rename IsV6LinkLocalAddress to IsV6LinkLocalUnicastAddress 2021-04-09 13:23:01 -07:00
stack_global_state.go Change copyright notice to "The gVisor Authors" 2019-04-29 14:26:23 -07:00
stack_options.go Add support for rate limiting out of window ACKs. 2021-02-02 11:05:28 -08:00
stack_test.go Unexpose immutable fields in stack.Route 2021-03-24 09:38:27 -07:00
transport_demuxer.go improve readability of ports package 2021-03-11 21:05:32 -08:00
transport_demuxer_test.go Add POLLRDNORM/POLLWRNORM support. 2021-03-24 12:11:44 -07:00
transport_test.go Unexpose immutable fields in stack.Route 2021-03-24 09:38:27 -07:00