From: Ruoyu <ruoyu.ying@intel.com>
Date: Thu, 23 Jul 2020 01:48:01 +0000 (+0800)
Subject: Minor changes for Istio configuration
X-Git-Tag: v1.0~16
X-Git-Url: https://gerrit.akraino.org/r/gitweb?a=commitdiff_plain;h=78281ddc35c1caf1fb79b58c8e321257586a2175;p=icn%2Fsdwan.git

Minor changes for Istio configuration

*Apply minor changes for remote access to Istio ingress

Change-Id: I650e57041c317fcf91c674b4ed4fd93ef3cb30df
---

diff --git a/platform/cnf/src/sdewan.user b/platform/cnf/src/sdewan.user
index 82642e7..5d000a5 100644
--- a/platform/cnf/src/sdewan.user
+++ b/platform/cnf/src/sdewan.user
@@ -13,13 +13,13 @@ then
 else
    iptables -t nat -D $SNAT_RULE
    iptables -t nat -D PREROUTING -p tcp --dport 6443 -j DNAT --to-destination $api_server
-   iptables -t nat -D PREROUTING -i net0 -j DNAT --to-destination $istio_ingress
+   iptables -t nat -D PREROUTING -i net1 -j DNAT --to-destination $istio_ingress
 fi
 
 iptables -t nat -A $SNAT_RULE
 iptables -t nat -A PREROUTING -p tcp --dport 6443 -j DNAT --to-destination $api_server
 if [[ $istio_ingress != "NXDOMAIN" ]];
 then
-  iptables -t nat -A PREROUTING -i net0 -j DNAT --to-destination $istio_ingress
+  iptables -t nat -A PREROUTING -i net1 -j DNAT --to-destination $istio_ingress
 fi
 
diff --git a/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh b/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh
index 6794d08..9a4139d 100755
--- a/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh
+++ b/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh
@@ -282,7 +282,7 @@ spec:
     - pnetwork
   input: ACCEPT
   output: ACCEPT
-  forward: REJECT
+  forward: ACCEPT
   masq: "0"
   mtu_fix: "1"
 EOF