/usr/bin/proxy-init

proxy-init adds a Kubernetes pod to the Linkerd service mesh.

Usage:
  proxy-init [flags]

Flags:
      --firewall-bin-path string           Path to iptables binary
      --firewall-save-bin-path string      Path to iptables-save binary
  -h, --help                               help for proxy-init
      --inbound-ports-to-ignore strings    Inbound ports and/or port ranges (inclusive) to ignore and not redirect to proxy. This has higher precedence than any other parameters.
  -p, --incoming-proxy-port int            Port to redirect incoming traffic (default -1)
      --iptables-mode string               Variant of iptables command to use ("legacy", "nft" or "plain"); overrides --firewall-bin-path and --firewall-save-bin-path
      --ipv6                               Set rules both via iptables and ip6tables to support dual-stack networking (default true)
      --log-format string                  Configure log format ('plain' or 'json') (default "plain")
      --log-level string                   Configure log level (default "info")
      --netns string                       Optional network namespace in which to run the iptables commands
      --outbound-ports-to-ignore strings   Outbound ports and/or port ranges (inclusive) to ignore and not redirect to proxy. This has higher precedence than any other parameters.
  -o, --outgoing-proxy-port int            Port to redirect outgoing traffic (default -1)
  -r, --ports-to-redirect ints             Port to redirect to proxy, if no port is specified then ALL ports are redirected
  -g, --proxy-gid int                      Group ID that the proxy is running under. Any traffic coming from this group will be ignored to avoid infinite redirection loops. (default -1)
  -u, --proxy-uid int                      User ID that the proxy is running under. Any traffic coming from this user will be ignored to avoid infinite redirection loops. (default -1)
      --simulate                           Don't execute any command, just print what would be executed
      --subnets-to-ignore strings          Subnets to ignore and not redirect to proxy. This has higher precedence than any other parameters.
      --timeout-close-wait-secs int        Sets nf_conntrack_tcp_timeout_close_wait
  -w, --use-wait-flag                      Appends the "-w" flag to the iptables commands