GO-2023-1915: containernetworking/plugins vulnerable to MitM attacks in github.com/containernetworking/plugins

plugins

module

v0.7.2 Latest Latest Go to latest Published: Apr 12, 2018 License: Apache-2.0

Details

Some CNI network plugins, maintained by the containernetworking team. For more information, see the individual READMEs.

bridge: Creates a bridge, adds the host and the container to it.
ipvlan: Adds an ipvlan interface in the container
loopback: Creates a loopback interface
macvlan: Creates a new MAC address, forwards all traffic to that to the container
ptp: Creates a veth pair.
vlan: Allocates a vlan device.

dhcp: Runs a daemon on the host to make DHCP requests on behalf of the container
host-local: maintains a local database of allocated IPs

flannel: generates an interface corresponding to a flannel config file
tuning: Tweaks sysctl parameters of an existing interface
portmap: An iptables-based portmapping plugin. Maps ports from the host's address space to the container.

The sample plugin provides an example for building your own plugin.

Path	Synopsis
pkg
ip
ipam
ns
testutils
testutils/echosvr command Echosvr is a simple TCP echo server It prints its listen address on stdout 127.0.0.1:xxxxx A test should wait for this line, parse it and may then attempt to connect.	Echosvr is a simple TCP echo server It prints its listen address on stdout 127.0.0.1:xxxxx A test should wait for this line, parse it and may then attempt to connect.
utils
utils/hwaddr
utils/sysctl
plugins
ipam/dhcp command
ipam/host-local command
ipam/host-local/backend
ipam/host-local/backend/allocator
ipam/host-local/backend/disk
ipam/host-local/backend/testing
main/bridge command
main/host-device command
main/ipvlan command
main/loopback command
main/macvlan command
main/ptp command
main/vlan command
meta/flannel command
meta/portmap command This is a post-setup plugin that establishes port forwarding - using iptables, from the host's network interface(s) to a pod's network interface.	This is a post-setup plugin that establishes port forwarding - using iptables, from the host's network interface(s) to a pod's network interface.
meta/tuning command
sample command This is a sample chained plugin that supports multiple CNI versions.	This is a sample chained plugin that supports multiple CNI versions.