Flush conntrack entry when UDP service endpoint is deleted

Fixes #157 kubernetes/kubernetes#19029 kubernetes/kubernetes#22573
cloudnativelabs · Dec 24, 2017 · f424e1a · f424e1a
1 parent 8ce5e4f
commit f424e1a
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -11,6 +11,7 @@ RUN apk add --no-cache \
       ipset \
       iproute2 \
       ipvsadm \
+      conntrack-tools \
       curl \
       bash && \
     mkdir -p /var/lib/gobgp && \

diff --git a/app/controllers/network_services_controller.go b/app/controllers/network_services_controller.go
@@ -537,6 +537,15 @@ func (nsc *NetworkServicesController) syncIpvsServices(serviceInfoMap serviceInf
 						glog.Errorf("Failed to delete destination %s from ipvs service %s",
 							ipvsDestinationString(dst), ipvsServiceString(ipvsSvc))
 					}
+
+					// flush conntrack when endpoint for a UDP service changes
+					if ipvsSvc.Protocol == syscall.IPPROTO_UDP {
+						_, err := exec.Command("conntrack", "-D", "--orig-dst", dst.Address.String(), "-p", "udp", "--dport", strconv.Itoa(int(dst.Port))).Output()
+						if err != nil {
+							glog.Error("Failed to delete conntrack entry for endpoint: " + dst.Address.String() + ":" + strconv.Itoa(int(dst.Port)) + " due to " + err.Error())
+						}
+						glog.Infof("Deleted conntrack entry for endpoint: " + dst.Address.String() + ":" + strconv.Itoa(int(dst.Port)))
+					}
 				}
 			}
 		}