v1.5.1

This release updates the base container images to alpine:3.14.2.

v1.5.0

With this release the proxy-init image no longer requires to be run as root! (except if you rely on the timeout-close-wait-secs flag).

v1.4.1

This release adds the log-format and log-level flags to proxy-init, and also cleans up the logging output.

v1.4.0

This release of linkerd2-proxy-init comes with a major change in anticipation
of Linkerd stable-2.11. In the upcoming stable version, linkerd-proxy will
no longer forward to ports bound on localhost, instead, it will use the
destination address and port.

Changes

• Remove redirect-non-loopback-local-traffic rule. When redirecting traffic to
  original address, the redirect rule in the output (outbound) chain would force a
  packet originating from the inbound side (going) to the process back to the
  inbound side. Packets generated from inbound and destined to process will still
  go through output chain (and hence, through the outbound chain, where they are
  caught by the now removed rule). Removing this rule ensures any packet not
  targeting 127.0.0.1 which originates from the proxy and is on lo can now be
  sent to its intended destination instead of being routed back through the
  inbound. For more information, check commit.

Non-user facing changes

• Update kind to v0.11.1 in integration workflow.

v1.3.13

• Include more output in the simulate mode (thanks @liuerfire!")
• Log to stdout instead of stderr (thanks @mo4islona!)

Non user-facing changes:

• Added dependabot.yml to receive automated dependencies upgrades PRs (both for go and github actions). As a result, also upgraded a bunch of dependencies.

v1.3.3

Added a timeout-close-wait-secs flag to the proxy-init process that sets the net.netfilter.nf_conntrack_tcp_timeout_close_wait. Note that this will fail if the container is not privileged

v1.3.2

Fix go directive in go.mod, to pass go v1.14 validation. This is not a user-facing change.

v1.3.1

Fixed iptables comments format, that was breaking CNI in v1.3.0

v1.3.0

Added support for the flags --inbound-ports-to-ignore and --outbound-ports-to-ignore to accept port ranges

v1.2.0

This release decreases the Docker image from 145MB to 61MB:

• Removed debugging tools from base Docker image
• Updated base Docker image to stretch-20190812-slim