1Panel-dev/1Panel
1
1
Fork 0
mirror of https://github.com/1Panel-dev/1Panel.git synced 2025-09-13 18:15:31 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

ref: Optimize IPv4 forwarding and preset chain existence check (#9592)

Browse source
This commit is contained in:
蘭 2025-07-21 19:04:42 +08:00 • committed by GitHub
parent 9fde8c447d
commit 71193cc912
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 9 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
agent/utils/firewall/client/iptables.go
View file

@ -73,15 +73,18 @@ func (iptables *Iptables) runf(tab, rule string, a ...any) error {
func (iptables *Iptables) Check() error {
stdout, err := cmd.RunDefaultWithStdoutBashC("cat /proc/sys/net/ipv4/ip_forward")
if err != nil {
return fmt.Errorf("%s, %s", err, stdout)
return fmt.Errorf("check ip_forward error: %w, output: %s", err, stdout)
}
if stdout == "0" {
return fmt.Errorf("ipv4 forward disable")
if strings.TrimSpace(stdout) == "0" {
return fmt.Errorf("ipv4 forward disabled")
}
chain, _ := iptables.outf(NatTab, "-L -n | grep 'Chain %s'", PreRoutingChain)
if len(strings.ReplaceAll(chain, "\n", "")) != 0 {
return fmt.Errorf("chain enabled")
chain, err := iptables.outf(NatTab, "-L -n | grep 'Chain %s'", PreRoutingChain)
if err != nil {
return fmt.Errorf("failed to check chain: %w", err)
}
if strings.TrimSpace(chain) != "" {
return fmt.Errorf("chain %s already exists", PreRoutingChain)
}
return nil