@@ -14,7 +14,7 @@ import (
1414 "github.com/pkg/errors"
1515)
1616
17- const SWIFT = "SWIFT-POSTROUTING"
17+ const SWIFTPOSTROUTING = "SWIFT-POSTROUTING"
1818
1919type IPtablesProvider struct {}
2020
@@ -37,13 +37,13 @@ func (service *HTTPRestService) programSNATRules(req *cns.CreateNetworkContainer
3737 return types .UnexpectedError , fmt .Sprintf ("[Azure CNS] Error. Failed to create iptables interface : %v" , err )
3838 }
3939
40- chainExist , err := ipt .ChainExists (iptables .Nat , SWIFT )
40+ chainExist , err := ipt .ChainExists (iptables .Nat , SWIFTPOSTROUTING )
4141 if err != nil {
4242 return types .UnexpectedError , fmt .Sprintf ("[Azure CNS] Error. Failed to check for existence of SWIFT-POSTROUTING chain: %v" , err )
4343 }
4444 if ! chainExist { // create and append chain if it doesn't exist
45- logger .Printf ("[Azure CNS] Creating SWIFT Chain ..." )
46- err = ipt .NewChain (iptables .Nat , SWIFT )
45+ logger .Printf ("[Azure CNS] Creating SWIFT-POSTROUTING Chain ..." )
46+ err = ipt .NewChain (iptables .Nat , SWIFTPOSTROUTING )
4747 if err != nil {
4848 return types .FailedToRunIPTableCmd , "[Azure CNS] failed to create SWIFT-POSTROUTING chain : " + err .Error ()
4949 }
@@ -73,12 +73,12 @@ func (service *HTTPRestService) programSNATRules(req *cns.CreateNetworkContainer
7373 // jump SWIFT rule exists, insert SWIFT-POSTROUTING rule at the same position so it ends up running first
7474 // first, remove any existing SWIFT-POSTROUTING rules to avoid duplicates
7575 // note: inserting at len(rules) and deleting a jump to SWIFT-POSTROUTING is mutually exclusive
76- swiftPostroutingExists , err := ipt .Exists (iptables .Nat , iptables .Postrouting , "-j" , SWIFT )
76+ swiftPostroutingExists , err := ipt .Exists (iptables .Nat , iptables .Postrouting , "-j" , SWIFTPOSTROUTING )
7777 if err != nil {
7878 return types .UnexpectedError , fmt .Sprintf ("[Azure CNS] Error. Failed to check for existence of SWIFT-POSTROUTING rule: %v" , err )
7979 }
8080 if swiftPostroutingExists {
81- err = ipt .Delete (iptables .Nat , iptables .Postrouting , "-j" , SWIFT )
81+ err = ipt .Delete (iptables .Nat , iptables .Postrouting , "-j" , SWIFTPOSTROUTING )
8282 if err != nil {
8383 return types .FailedToRunIPTableCmd , "[Azure CNS] failed to delete existing SWIFT-POSTROUTING rule : " + err .Error ()
8484 }
@@ -90,7 +90,7 @@ func (service *HTTPRestService) programSNATRules(req *cns.CreateNetworkContainer
9090 // -P POSTROUTING ACCEPT is at swiftRuleIndex 0
9191 // -A POSTROUTING -j SWIFT is at swiftRuleIndex 1, and iptables index 1
9292 logger .Printf ("[Azure CNS] Inserting SWIFT-POSTROUTING Chain at iptables position %d" , swiftRuleIndex )
93- err = ipt .Insert (iptables .Nat , iptables .Postrouting , swiftRuleIndex , "-j" , SWIFT )
93+ err = ipt .Insert (iptables .Nat , iptables .Postrouting , swiftRuleIndex , "-j" , SWIFTPOSTROUTING )
9494 if err != nil {
9595 return types .FailedToRunIPTableCmd , "[Azure CNS] failed to insert SWIFT-POSTROUTING chain : " + err .Error ()
9696 }
@@ -111,7 +111,7 @@ func (service *HTTPRestService) programSNATRules(req *cns.CreateNetworkContainer
111111 // check if all rules exist
112112 allRulesExist := true
113113 for _ , rule := range rules {
114- exists , err := ipt .Exists (iptables .Nat , SWIFT , rule ... )
114+ exists , err := ipt .Exists (iptables .Nat , SWIFTPOSTROUTING , rule ... )
115115 if err != nil {
116116 return types .UnexpectedError , fmt .Sprintf ("[Azure CNS] Error. Failed to check for existence of rule: %v" , err )
117117 }
@@ -122,7 +122,7 @@ func (service *HTTPRestService) programSNATRules(req *cns.CreateNetworkContainer
122122 }
123123
124124 // get current rule count in SWIFT-POSTROUTING chain
125- currentRules , err := ipt .List (iptables .Nat , SWIFT )
125+ currentRules , err := ipt .List (iptables .Nat , SWIFTPOSTROUTING )
126126 if err != nil {
127127 return types .UnexpectedError , fmt .Sprintf ("[Azure CNS] Error. Failed to list rules in SWIFT-POSTROUTING chain: %v" , err )
128128 }
@@ -132,13 +132,13 @@ func (service *HTTPRestService) programSNATRules(req *cns.CreateNetworkContainer
132132 if len (currentRules ) != len (rules )+ 1 || ! allRulesExist {
133133 logger .Printf ("[Azure CNS] Reconciling SWIFT-POSTROUTING chain rules" )
134134
135- err = ipt .ClearChain (iptables .Nat , SWIFT )
135+ err = ipt .ClearChain (iptables .Nat , SWIFTPOSTROUTING )
136136 if err != nil {
137137 return types .FailedToRunIPTableCmd , "[Azure CNS] failed to flush SWIFT-POSTROUTING chain : " + err .Error ()
138138 }
139139
140140 for _ , rule := range rules {
141- err = ipt .Append (iptables .Nat , SWIFT , rule ... )
141+ err = ipt .Append (iptables .Nat , SWIFTPOSTROUTING , rule ... )
142142 if err != nil {
143143 return types .FailedToRunIPTableCmd , "[Azure CNS] failed to append rule to SWIFT-POSTROUTING chain : " + err .Error ()
144144 }
0 commit comments