Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable extra kernel options to support Istio dns proxy feature #8153

Closed
davidshen84 opened this issue Mar 16, 2022 · 5 comments · Fixed by psemuu/WSL2-Linux-Kernel#2
Closed
Assignees
Labels

Comments

@davidshen84
Copy link

Is your feature request related to a problem? Please describe.

Istio DNS proxy fails with the current kernel build, Linux/x86 5.10.60.1. There's a discussion on this issue.

Describe the solution you'd like

Enable these two kernel option:

  • CONFIG_NF_CONNTRACK_ZONES=y
  • CONFIG_NETFILTER_XT_TARGET_CT=y

Describe alternatives you've considered
Use native Linux

Additional context

Istio version: 1.12.0

@thesuperzapper
Copy link

@kelsey-steele I see that you were the last person to update the config-wsl kernel build options in the WSL repo. I would greatly appreciate you taking a look at this.

How do you feel about enabling CONFIG_NF_CONNTRACK_ZONES and CONFIG_NETFILTER_XT_TARGET_CT, as doing so will unblock running Kubernetes clusters (with service meshes like Istio) on WSL2.

(Read more about the Istio issue here: istio/istio#37885)


PS: I tried to raise a PR, but the microsoft/WSL2-Linux-Kernel repo is limited to collaborators only.

@kelsey-steele
Copy link
Collaborator

@thesuperzapper hello o/

Happy to check into this. Give me time to do a little research and testing, then I'll come back here with an update. I'll do my best to provide an update here before I update the kernel next (~end of month).

I appreciate you taking the time on the PR and sorry the WSL2 repo isn't open to taking that at this time.

@kelsey-steele kelsey-steele self-assigned this Oct 12, 2023
@kelsey-steele
Copy link
Collaborator

Quick swing by to note this isn't forgotten. I have these configs added to a kernel in testing now. I should have a proper update here next week.

kelsey-steele added a commit to microsoft/WSL2-Linux-Kernel that referenced this issue Dec 19, 2023
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
@kelsey-steele
Copy link
Collaborator

@thesuperzapper sorry on such a delay for this task! This config change is part of a larger WSL update where WSL will support loadable modules. This will be the config changes in the upcoming kernel:

NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

The next kernel release with the updated config file con be found in the WSL2-Linux-Kernel repo: https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-5.15.137.3

The loadable modules rely on a WSL update that is coming soon; this will first be seen as a pre-release. I'm keeping an eye out for that pre-release and plan to come back and update here when that happens. :)

Thank you for the patience!

sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Dec 20, 2023
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Dec 20, 2023
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jan 1, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jan 6, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jan 11, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jan 16, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jan 21, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
@kelsey-steele
Copy link
Collaborator

@thesuperzapper this update can be found in the latest WSL pre-release: https://github.com/microsoft/WSL/releases/tag/2.1.1

I'm going to close this issue now, though please report and ping me if any problems are found. Thank you! :)

sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jan 26, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Feb 1, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Feb 5, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Feb 17, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Feb 24, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Mar 1, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Mar 1, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Mar 6, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Mar 16, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Mar 27, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Apr 3, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Apr 3, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Apr 10, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Apr 14, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Apr 18, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Apr 28, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Apr 30, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue May 3, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue May 18, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue May 25, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jun 12, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jun 16, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jun 22, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jun 27, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
Trass3r pushed a commit to Trass3r/WSL2-Linux-Kernel that referenced this issue Jul 3, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
Trass3r pushed a commit to Trass3r/WSL2-Linux-Kernel that referenced this issue Jul 4, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
Trass3r pushed a commit to Trass3r/WSL2-Linux-Kernel that referenced this issue Jul 4, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
sileshn pushed a commit to sileshn/WSL2-Linux-Kernel that referenced this issue Jul 5, 2024
NF_CONNTRACK_ZONES=y
NETFILTER_XT_TARGET_CT=m

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

NETFILTER_XT_TARGET_CT adds a `CT' target, which allows to specify
initial connection tracking parameters like events to be delivered and
the helper to be used.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 9, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 9, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 9, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 16, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 16, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 22, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 22, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 22, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
1582130940 pushed a commit to 1582130940/android_kernel_xiaomi_sdm660 that referenced this issue Jul 22, 2024
CONFIG_NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES=y

NF_CONNTRACK_ZONES enables support for connection tracking zones. Normally,
each connection needs to have a unique system wide identity. Connection
tracking zones allow to have multiple connections using the same
identity, as long as they are contained in different zones.

Enabling these two configs to support Istio DNS proxy feature.

Link: microsoft/WSL#8153
Signed-off-by: Kelsey Steele <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants