kubernetes/pkg/proxy
Dan Winship c12534d8b4 kubelet, kube-proxy: unmark packets before masquerading them
It seems that if you set the packet mark on a packet and then route
that packet through a kernel VXLAN interface, the VXLAN-encapsulated
packet will still have the mark from the original packet. Since our
NAT rules are based on the packet mark, this was causing us to
double-NAT some packets, which then triggered a kernel checksumming
bug. But even without the checksum bug, there are reasons to avoid
double-NATting, so fix the rules to unmark the packets before
masquerading them.
2020-06-15 18:45:38 -04:00
..
apis kube-proxy: add '--bind-address-hard-fail' flag to treat failure to bind to a port as fatal 2020-04-02 13:13:10 +08:00
config Run hack/update-vendor.sh 2020-05-16 07:54:33 -04:00
healthcheck Run hack/update-vendor.sh 2020-05-16 07:54:33 -04:00
iptables kubelet, kube-proxy: unmark packets before masquerading them 2020-06-15 18:45:38 -04:00
ipvs kubelet, kube-proxy: unmark packets before masquerading them 2020-06-15 18:45:38 -04:00
metaproxier Run hack/update-vendor.sh 2020-05-16 07:54:33 -04:00
metrics pkg/proxy: add last-queued-timestamp metric 2020-04-21 15:19:32 +02:00
userspace Run hack/update-vendor.sh 2020-05-16 07:54:33 -04:00
util proxy utils: GetNodeAddresses should check if matching addresses were found 2020-05-26 12:45:32 -04:00
winkernel Merge pull request #91886 from sbangari/fixsourcevip 2020-06-09 14:49:50 -07:00
winuserspace Run hack/update-vendor.sh 2020-05-16 07:54:33 -04:00
BUILD Run hack/update-vendor.sh 2020-05-16 07:54:33 -04:00
doc.go
endpoints_test.go Service Topology implementation 2019-11-15 13:36:43 +08:00
endpoints.go switch over k/k to use klog v2 2020-05-16 07:54:27 -04:00
endpointslicecache_test.go Ensuring kube-proxy does not mutate shared EndpointSlices 2019-12-10 13:18:04 -08:00
endpointslicecache.go switch over k/k to use klog v2 2020-05-16 07:54:27 -04:00
OWNERS pkg/proxy: add sig-network-approvers/sig-network-reviewers to OWNERS files 2019-05-13 10:30:29 -05:00
service_test.go kube-proxy filter Load Balancer Status ingress 2020-02-11 10:25:59 +01:00
service.go switch over k/k to use klog v2 2020-05-16 07:54:27 -04:00
topology_test.go Service Topology implementation 2019-11-15 13:36:43 +08:00
topology.go Service Topology implementation 2019-11-15 13:36:43 +08:00
types.go kube-proxy: log service and endpoint updates 2020-04-10 15:29:44 -07:00