Skip to content

Commit a3f4474

Browse files
EItanyabowei
authored andcommitted
Use link-local actor veth addresses
1 parent b923428 commit a3f4474

1 file changed

Lines changed: 5 additions & 5 deletions

File tree

cmd/ateom-gvisor/main.go

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -60,10 +60,10 @@ const (
6060
hostVethName = "ateom0"
6161
actorVethName = "eth0"
6262
actorVethTempName = "ateom1"
63-
hostVethCIDR = "10.200.0.1/30"
64-
actorVethCIDR = "10.200.0.2/30"
65-
actorVethGateway = "10.200.0.1"
66-
actorVethIP = "10.200.0.2"
63+
hostVethCIDR = "169.254.17.1/30"
64+
actorVethCIDR = "169.254.17.2/30"
65+
actorVethGateway = "169.254.17.1"
66+
actorVethIP = "169.254.17.2"
6767
actorNftTableName = "ateom_actor"
6868
)
6969

@@ -607,7 +607,7 @@ func installActorNftablesRules(podIP net.IP) error {
607607
//
608608
// The temporary compatibility rules do three things:
609609
//
610-
// * postrouting: masquerade actor egress from 10.200.0.2 behind the worker
610+
// * postrouting: masquerade actor egress from 169.254.17.2 behind the worker
611611
// pod IP so replies route back to the pod.
612612
// * prerouting: DNAT traffic sent to the worker pod IP on TCP/80 to the
613613
// actor veth IP on TCP/80, preserving existing inbound behavior.

0 commit comments

Comments
 (0)