[Dnsmasq-discuss] Single-port mode for TFTP

kvaps kvapss at gmail.com
Tue Dec 31 06:38:26 GMT 2019


No, there is need to respond exact from the same port which get an request.
There is no way to configure firewall and use tftp-helper in Kubernetes,
it's environments is very dynamic and might use different backends, eg ipvs
and iptables.

Please read this issue for more information:
https://github.com/kubernetes/kubernetes/issues/26718

On Tue, Dec 31, 2019, 07:20 john doe <johndoe65534 at mail.com> wrote:

> On 12/30/2019 6:34 PM, kvaps wrote:
> > On Mon, Dec 30, 2019 at 2:42 PM john doe <johndoe65534 at mail.com> wrote:
> >
> >> Isn't the below flag what you want from (1):
> >>
> >> "--tftp-port-range=<start>,<end>
> >> A TFTP server listens on a well-known port (69) for connection
> >> initiation, but it also uses a dynamically-allocated port for each
> >> connection. Normally these are allocated by the OS, but this option
> >> specifies a range of ports for use by TFTP transfers. This can be useful
> >> when TFTP has to traverse a firewall. The start of the range cannot be
> >> lower than 1025 unless dnsmasq is running as root. The number of
> >> concurrent TFTP connections is limited by the size of the port range."
> >>
> >>
> >> 1)  http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html
> >>
> >> --
> >> John Doe
> >>
> >
> > Hi John,
> >
> > Unfrtunately it isn't working correctly:
> >
> > if I run dnsmasq with static port range:
> >
> > dnsmasq -d --enable-tftp --tftp-port-range=69,69
> >
> > It reports an error:
> >
> > dnsmasq-tftp: unable to get free port for TFTP
> >
> > when I tries to download any file
> >
>
> You can not specify 69 here, with the current implimentation, you need
> to open an other port for TFTP transfer.
>
> Can't you open two ports?
>
> Have you considered using a TFTP helper in your Firewall?
>
> --
> John Doe
>
> _______________________________________________
> Dnsmasq-discuss mailing list
> Dnsmasq-discuss at lists.thekelleys.org.uk
> http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/attachments/20191231/a3b03539/attachment.html>


More information about the Dnsmasq-discuss mailing list