fix iptables init

neondatabase · Nov 25, 2024 · a8af9ad · a8af9ad
1 parent 52960a0
commit a8af9ad
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/neonvm-runner/cmd/main.go b/neonvm-runner/cmd/main.go
@@ -1218,7 +1218,7 @@ func listenForHTTPRequests(
 	}
 }
 
-func incNetBytesCounter(iptables iptables.IPTables, chain string, cnt *vmv1.NetworkBytes) error {
+func incNetBytesCounter(iptables *iptables.IPTables, chain string, cnt *vmv1.NetworkBytes) error {
 	// TODO(myrrc) neon_private_cidr?
 	rules, err := iptables.StructuredStats("filter", chain)
 	if err != nil {
@@ -1241,7 +1241,12 @@ func handleGetNetworkUsage(logger *zap.Logger, w http.ResponseWriter, r *http.Re
 
 	counts := vmv1.VirtualMachineNetworkUsage{IngressBytes: 0, EgressBytes: 0}
 	// Rules configured at github.com/neondatabase/cloud/blob/main/compute-init/compute-init.sh#L98
-	iptables := iptables.IPTables{}
+	iptables, err := iptables.New()
+	if err != nil {
+		logger.Error("error initializing iptables", zap.Error(err))
+		w.WriteHeader(500)
+		return
+	}
 	if err := incNetBytesCounter(iptables, "INPUT", &counts.IngressBytes); err != nil {
 		logger.Error("error reading ingress byte counts", zap.Error(err))
 		w.WriteHeader(500)