runsc: don't scrape iptables rules by default

PiperOrigin-RevId: 582543873
This commit is contained in:
Kevin Krakauer
2023-11-14 22:24:33 -08:00
committed by gVisor bot
parent 3ab01aedb8
commit ceb1b69e35
+1 -1
View File
@@ -120,7 +120,7 @@ func RegisterFlags(flagSet *flag.FlagSet) {
flagSet.Int("num-network-channels", 1, "number of underlying channels(FDs) to use for network link endpoints.")
flagSet.Bool("buffer-pooling", true, "enable allocation of buffers from a shared pool instead of the heap.")
flagSet.Bool("EXPERIMENTAL-afxdp", false, "EXPERIMENTAL. Use an AF_XDP socket to receive packets.")
flagSet.Bool("reproduce-nat", true, "Scrape the host netns NAT table and reproduce it in the sandbox.")
flagSet.Bool("reproduce-nat", false, "Scrape the host netns NAT table and reproduce it in the sandbox.")
// Flags that control sandbox runtime behavior: accelerator related.
flagSet.Bool("nvproxy", false, "EXPERIMENTAL: enable support for Nvidia GPUs")