fix: Add iptables execution timeout (#11176)

ssongliu · web-flow · commit b3350b54b3f8 · 2025-12-04T11:22:25.000+08:00
diff --git a/agent/utils/firewall/client/iptables/common.go b/agent/utils/firewall/client/iptables/common.go
@@ -44,7 +44,7 @@ const (
 )
 
 func RunWithStd(tab, rule string) (string, error){
-	cmdMgr := cmd.NewCommandMgr(cmd.WithIgnoreExist1(), cmd.WithTimeout(20*time.Second))
+	cmdMgr := cmd.NewCommandMgr(cmd.WithIgnoreExist1(), cmd.WithTimeout(60*time.Second))
 	stdout, err := cmdMgr.RunWithStdoutBashCf("%s iptables -w -t %s %s", cmd.SudoHandleCmd(), tab, rule)
 	if err != nil{
 		global.LOG.Errorf("iptables command failed [table=%s, rule=%s]: %v", tab, rule, err)
@@ -53,7 +53,7 @@ func RunWithStd(tab, rule string) (string, error){
 	return stdout, nil
 }
 func RunWithoutIgnore(tab, rule string) (string, error){
-	cmdMgr := cmd.NewCommandMgr(cmd.WithTimeout(20 * time.Second))
+	cmdMgr := cmd.NewCommandMgr(cmd.WithTimeout(60 * time.Second))
 	stdout, err := cmdMgr.RunWithStdoutBashCf("%s iptables -t %s %s", cmd.SudoHandleCmd(), tab, rule)
 	if err != nil{
 		return stdout, err

-Original file line number
+Diff line change
+)
 funcRunWithStd(tab, rulestring) (string, error){
 -cmdMgr:=cmd.NewCommandMgr(cmd.WithIgnoreExist1(), cmd.WithTimeout(20*time.Second))
 +cmdMgr:=cmd.NewCommandMgr(cmd.WithIgnoreExist1(), cmd.WithTimeout(60*time.Second))
 stdout, err:=cmdMgr.RunWithStdoutBashCf("%s iptables -w -t %s %s", cmd.SudoHandleCmd(), tab, rule)
 iferr!=nil{
 global.LOG.Errorf("iptables command failed [table=%s, rule=%s]: %v", tab, rule, err)
 returnstdout, nil
+}
 funcRunWithoutIgnore(tab, rulestring) (string, error){
 -cmdMgr:=cmd.NewCommandMgr(cmd.WithTimeout(20*time.Second))
 +cmdMgr:=cmd.NewCommandMgr(cmd.WithTimeout(60*time.Second))
 stdout, err:=cmdMgr.RunWithStdoutBashCf("%s iptables -t %s %s", cmd.SudoHandleCmd(), tab, rule)
 iferr!=nil{
 returnstdout, err