Files
kubernetes/pkg/proxy
Surya Seetharaman 477b14b3c4 Kube-proxy: Perf-fix: Shrink INPUT chain
In #56164, we had split the reject rules for non-ep existing services
into KUBE-EXTERNAL-SERVICES chain in order to avoid calling KUBE-SERVICES
from INPUT. However in #74394 KUBE-SERVICES was re-added into INPUT.

As noted in #56164, kernel is sensitive to the size of INPUT chain. This
patch refrains from calling the KUBE-SERVICES chain from INPUT and FORWARD,
instead adds the lb reject rule to the KUBE-EXTERNAL-SERVICES chain which will be
called from INPUT and FORWARD.
2020-10-19 11:26:04 +02:00
..
2020-05-16 07:54:33 -04:00
2020-05-16 07:54:33 -04:00
2020-05-16 07:54:33 -04:00
2020-05-16 07:54:33 -04:00
2016-07-16 13:48:21 -04:00
2019-11-15 13:36:43 +08:00