From 78281ddc35c1caf1fb79b58c8e321257586a2175 Mon Sep 17 00:00:00 2001 From: Ruoyu Date: Thu, 23 Jul 2020 09:48:01 +0800 Subject: [PATCH] Minor changes for Istio configuration *Apply minor changes for remote access to Istio ingress Change-Id: I650e57041c317fcf91c674b4ed4fd93ef3cb30df --- platform/cnf/src/sdewan.user | 4 ++-- platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/platform/cnf/src/sdewan.user b/platform/cnf/src/sdewan.user index 82642e7..5d000a5 100644 --- a/platform/cnf/src/sdewan.user +++ b/platform/cnf/src/sdewan.user @@ -13,13 +13,13 @@ then else iptables -t nat -D $SNAT_RULE iptables -t nat -D PREROUTING -p tcp --dport 6443 -j DNAT --to-destination $api_server - iptables -t nat -D PREROUTING -i net0 -j DNAT --to-destination $istio_ingress + iptables -t nat -D PREROUTING -i net1 -j DNAT --to-destination $istio_ingress fi iptables -t nat -A $SNAT_RULE iptables -t nat -A PREROUTING -p tcp --dport 6443 -j DNAT --to-destination $api_server if [[ $istio_ingress != "NXDOMAIN" ]]; then - iptables -t nat -A PREROUTING -i net0 -j DNAT --to-destination $istio_ingress + iptables -t nat -A PREROUTING -i net1 -j DNAT --to-destination $istio_ingress fi diff --git a/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh b/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh index 6794d08..9a4139d 100755 --- a/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh +++ b/platform/test/e2e-test-crd/edge-scripts/setup-cnf.sh @@ -282,7 +282,7 @@ spec: - pnetwork input: ACCEPT output: ACCEPT - forward: REJECT + forward: ACCEPT masq: "0" mtu_fix: "1" EOF -- 2.16.6