Files
gluetun/internal/netlink/conntrack_linux.go
T
Quentin McGaw 625a63e7c2 fix(firewall): flush conntrack table after enabling firewall at container start
- prevent leaks for connections made the first ~10 milliseconds when Gluetun starts
- seems critical,  but in practice this very rarely happen and it very hard to reproduce
2026-02-22 13:31:38 +00:00

18 lines
258 B
Go

package netlink
import (
"fmt"
"github.com/ti-mo/conntrack"
)
func (n *NetLink) FlushConntrack() error {
conn, err := conntrack.Dial(nil)
if err != nil {
return fmt.Errorf("dialing conntrack: %w", err)
}
defer conn.Close()
return conn.Flush()
}