kubeovn / kube-ovn / 24278550607

25%

push

github

fix(daemon): sort map keys before iterating to stabilize iptables rules (#6619)

Go map iteration order is randomized, causing iptables rules generated
from map traversal to appear in different order on each sync cycle.
This triggers unnecessary rule deletion and re-insertion in
updateIptablesChain's incremental comparison, and could cause incorrect
SNAT matching when overlapping CIDRs exist.

Sort map keys with slices.Sorted(maps.Keys(...)) before iterating in
three locations:
- centralGwNatIPs: SNAT rules in OvnPostrouting chain
- subnetCidrs: FORWARD rules for subnet traffic accounting
- natPolicyRuleIptablesMap: NAT outgoing policy chain updates

Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

0 of 6 new or added lines in 1 file covered. (0.0%)

13769 of 56209 relevant lines covered (24.5%)

0.29 hits per line