containernetworking / plugins / 29770980156

53%

master: 55%

Pull #1277

github

portmap: flush UDP conntrack on DEL to avoid hostPort blackhole

cmdAdd already deletes stale UDP conntrack entries after installing
DNAT rules so a replacement pod with a new IP is not blackholed. cmdDel
only tore down the iptables/nftables rules and left conntrack alone.

That breaks the common case of flipping a pod to hostNetwork:true on
the same hostPort: DEL removes the NAT mapping, but leftover UDP
conntrack still steers packets at the gone container IP. Flush on DEL
the same way ADD does (best-effort; failures are logged only).

Fixes #1190

Signed-off-by: Dean Chen <862469039@qq.com>

0 of 10 new or added lines in 1 file covered. (0.0%)

5011 of 9535 relevant lines covered (52.55%)

27.83 hits per line