GoogleCloudPlatform / GoogleCloudPlatform/netd

The ip rules to exempt DNS traffic are not removed when the flag is turned off.

Open
#176 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Go
Stars
77
Forks
48
PR merge metrics
No merged PRs in 30d

Description

From an unrelated debugging I found out the rules added in https://github.com/GoogleCloudPlatform/netd/pull/114 are not cleaned up properly when the DNS exempt flag is turned off.

e.g. We would still see these two rules (29999 and 30000) dangling:
```
root@gke-XXX:~# ip rule
9: from all fwmark 0x200/0xf00 lookup 2004
100: from all lookup local
29999: from all dport 53 lookup main
30000: from all sport 53 lookup main
32766: from all lookup main
32767: from all lookup default
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.