From ceafc0e3b2c3913d40bdaaf5e00ec3671ec5ce4e Mon Sep 17 00:00:00 2001 From: Claes Mogren Date: Fri, 11 Sep 2020 15:13:03 -0700 Subject: [PATCH] Seems the rule got merged twice --- pkg/networkutils/network.go | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/pkg/networkutils/network.go b/pkg/networkutils/network.go index c97aa6085d..0d12da3ec1 100644 --- a/pkg/networkutils/network.go +++ b/pkg/networkutils/network.go @@ -447,17 +447,6 @@ func (n *linuxNetwork) SetupHostNetwork(vpcCIDRs []string, primaryMAC string, pr }, }) - iptableRules = append(iptableRules, iptablesRule{ - name: "connmark restore for primary ENI from vlan", - shouldExist: n.nodePortSupportEnabled, - table: "mangle", - chain: "PREROUTING", - rule: []string{ - "-m", "comment", "--comment", "AWS, primary ENI", - "-i", "vlan+", "-j", "CONNMARK", "--restore-mark", "--mask", fmt.Sprintf("%#x", n.mainENIMark), - }, - }) - for _, rule := range iptableRules { log.Debugf("execute iptable rule : %s", rule.name)