I noticed a conflict in the documentation when attempting to change the default DNS.

The DNS section says:

$IPTABLES -t nat -A OUTPUT -p tcp --dport 53 -j DNAT --to-destination 208.67.222.222:53 || true
$IPTABLES -t nat -A OUTPUT -p udp --dport 53 -j DNAT --to-destination 208.67.222.222:53 || true

While the [Custom

VM's provisioned on OpenStack have anti-spoofing measures which will drop packets if the source address is not matching to the assigned VM's ip. This prevents pod-to-pod traffic across the nodes getting routed when kube-router is used in direct routing mode.

Following are options to overcome this limitation:

• configure OpenStack to allo pod-to-pod traffic. Steps are documented for kubespray

I miss a line in the very last schema on http://firehol.org/tutorial/firehol-new-user/
Should not be present the command
server ident reject with tcp-reset
under interface4 ppp+ internet src not "${home_ips} ${UNROUTABLE_IPS}"?
This command appears under the schema before last.

After I created the Daemonset on the remote cluster, the kube-iptables-tailer were running but it throws this error

E0903 11:47:30.085747       1 parser.go:31] Error retrieving log time to check expiration: parsing time "Sep" as "2006-01-02T15:04:05.000000-07:00": cannot parse "Sep" as "2006"

Time format expected by kube-iptables-tailer

2019-02-04T10:10:12.345678-07:00 host

Is your feature request related to a problem? Please describe.

In order to simplify the debug of Polycube we should document how it can be run in debug mode.
Hint:

• Enable the debug (https://stackoverflow.com/questions/7724569/debug-vs-release-in-cmake) and then use gdb gdb --args polycubed (don't forget to install after compiling)

Cookbook version

4.5.0, master

The line of code in question is: https://github.com/chef-cookbooks/iptables/blob/2c02699814eb9e1f16c29bcaabb1170404b07040/recipes/default.rb#L62

This should be:

variables iptables_save_file: node['iptables']["persisted_rules_#{ipt}"]

Really, this block shouldn't be there at all. It was removed in #90 because iptables-persistent made