010-fixed-for-Docker-Compose.patch 1.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546
  1. From 78336e55a31db578c139a5bb472aa0fc219c169d Mon Sep 17 00:00:00 2001
  2. From: Xiaoxu Guo <[email protected]>
  3. Date: Thu, 4 Aug 2022 16:24:04 +0800
  4. Subject: [PATCH] fixed for Docker Compose
  5. ---
  6. service/core/iptables/tproxy.go | 7 +++++--
  7. 1 file changed, 5 insertions(+), 2 deletions(-)
  8. --- a/core/iptables/tproxy.go
  9. +++ b/core/iptables/tproxy.go
  10. @@ -65,6 +65,7 @@ iptables -w 2 -t mangle -A TP_PRE -p udp
  11. iptables -w 2 -t mangle -A TP_RULE -j CONNMARK --restore-mark
  12. iptables -w 2 -t mangle -A TP_RULE -m mark --mark 0x40/0xc0 -j RETURN
  13. +iptables -w 2 -t mangle -A TP_RULE -i br+ -j RETURN
  14. iptables -w 2 -t mangle -A TP_RULE -i docker+ -j RETURN
  15. iptables -w 2 -t mangle -A TP_RULE -i veth+ -j RETURN
  16. `
  17. @@ -123,6 +124,8 @@ ip6tables -w 2 -t mangle -A TP_PRE -p ud
  18. ip6tables -w 2 -t mangle -A TP_RULE -j CONNMARK --restore-mark
  19. ip6tables -w 2 -t mangle -A TP_RULE -m mark --mark 0x40/0xc0 -j RETURN
  20. +ip6tables -w 2 -t mangle -A TP_RULE -m mark --mark 0x40/0xc0 -j RETURN
  21. +ip6tables -w 2 -t mangle -A TP_RULE -i br+ -j RETURN
  22. ip6tables -w 2 -t mangle -A TP_RULE -i docker+ -j RETURN
  23. ip6tables -w 2 -t mangle -A TP_RULE -i veth+ -j RETURN
  24. `
  25. @@ -156,7 +159,7 @@ ip6tables -w 2 -t mangle -A TP_MARK -j C
  26. func (t *tproxy) GetCleanCommands() Setter {
  27. commands := `
  28. -ip rule del fwmark 0x40/0xc0 table 100
  29. +ip rule del fwmark 0x40/0xc0 table 100
  30. ip route del local 0.0.0.0/0 dev lo table 100
  31. iptables -w 2 -t mangle -F TP_OUT
  32. @@ -172,7 +175,7 @@ iptables -w 2 -t mangle -X TP_MARK
  33. `
  34. if IsIPv6Supported() {
  35. commands += `
  36. -ip -6 rule del fwmark 0x40/0xc0 table 100
  37. +ip -6 rule del fwmark 0x40/0xc0 table 100
  38. ip -6 route del local ::/0 dev lo table 100
  39. ip6tables -w 2 -t mangle -F TP_OUT