GithubHelp home page GithubHelp logo

metal-stack / droptailer Goto Github PK

View Code? Open in Web Editor NEW
5.0 5.0 1.0 156 KB

droptailer visualize iptables/nftables drops in a kubernetes environment

License: MIT License

Makefile 8.94% Go 89.24% Dockerfile 1.82%
iptables kubernetes nftables

droptailer's Introduction

metal-stack

we believe kubernetes runs best on bare metal, this is all about providing metal as a service

droptailer's People

Contributors

dependabot[bot] avatar gerrit91 avatar majst01 avatar mreiger avatar mwindower avatar

Stargazers

avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar avatar avatar

Forkers

grigoriymikhalkin

droptailer's Issues

Unreadable console output from time to time

Not sure what triggers this behavior, but sometimes, this happens (removed IPs from output):

...
0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\"log\":\"2021-08-03 22:00:01 +0000 UTC {\\\"DPT\\\":\\\"60104\\\",\\\"DST\\\":\\\"<censoredip>.228\\\",\\\"ID\\\":\\\"63236\\\",\\\"IN\\\":\\\"vrf104009\\\",\\\"LEN\\\":\\\"40\\\",\\\"MAC\\\":\\\"16:6d:dd:6f:ae:a6:8e:3d:ea:23:95:38:08:00\\\",\\\"OUT\\\":\\\"\\\",\\\"PREC\\\":\\\"0x00\\\",\\\"PROTO\\\":\\\"TCP\\\",\\\"RES\\\":\\\"0x00\\\",\\\"SPT\\\":\\\"46629\\\",\\\"SRC\\\":\\\"92.63.196.236\\\",\\\"SYN\\\":\\\"\\\",\\\"TOS\\\":\\\"0x08\\\",\\\"TTL\\\":\\\"241\\\",\\\"URGP\\\":\\\"0\\\",\\\"WINDOW\\\":\\\"1024\\\",\\\"timestamp\\\":\\\"2021-08-03 22:00:01 +0000 UTC\\\"}\\n\",\"stream\":\"stdout\",\"time\":\"2021-08-03T22:00:01.553956402Z\"}\n"%                                          
➜  ~ k -n firewall get pods
NAME                          READY   STATUS    RESTARTS   AGE
droptailer-5cd8999c8d-d4m9j   1/1     Running   0          98d
➜  ~ k -n firewall delete pod droptailer-5cd8999c8d-d4m9j 
pod "droptailer-5cd8999c8d-d4m9j" deleted
➜  ~ k -n firewall get pods                              
NAME                          READY   STATUS    RESTARTS   AGE
droptailer-5cd8999c8d-h75p9   1/1     Running   0          13s
➜  ~ k -n firewall logs droptailer-5cd8999c8d-h75p9 -f   
2021/08/04 13:17:51 listening on 50051
2021-08-04 13:18:07 +0000 UTC {"DPT":"14753","DST":"<censoredip>.104","ID":"5886","IN":"vrf104009","LEN":"40","MAC":"16:6d:dd:6f:ae:a6:8e:3d:ea:23:95:38:08:00","OUT":"vlan155","PREC":"0x00","PROTO":"TCP","RES":"0x00","SPT":"46436","SRC":"45.134.26.54","SYN":"","TOS":"0x00","TTL":"240","URGP":"0","WINDOW":"1024","timestamp":"2021-08-04 13:18:07 +0000 UTC"}
2021-08-04 13:18:08 +0000 UTC {"DF":"","DPT":"5060","DST":"<censoredip>.104","ID":"32394","IN":"vrf104009","LEN":"421","MAC":"16:6d:dd:6f:ae:a6:8e:3d:ea:23:95:38:08:00","OUT":"vlan155","PREC":"0x00","PROTO":"UDP","SPT":"5130","SRC":"193.107.216.129","TOS":"0x00","TTL":"52","timestamp":"2021-08-04 13:18:08 +0000 UTC"}
2021-08-04 13:18:08 +0000 UTC {"DF":"","DPT":"5060","DST":"<censoredip>.109","ID":"45980","IN":"vrf104009","LEN":"422","MAC":"16:6d:dd:6f:ae:a6:8e:3d:ea:23:95:38:08:00","OUT":"vlan155","PREC":"0x00","PROTO":"UDP","SPT":"5130","SRC":"193.107.216.129","TOS":"0x00","TTL":"52","timestamp":"2021-08-04 13:18:08 +0000 UTC"}

Introduce self updating mechanism

in case a new version with new features/bugfixes/security issues is released, actually a new metal-image of the firewall is required. This is often not possible to update the firewall just to update the droptailer version.

It could be done with the same mechanism we have in the firewall-controller, it could also update the droptailer binary.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.