Antonio Ojea ed21a0e16c kube-proxy: clear conntrack entries after rules are in place ...

Clear conntrack entries for UDP NodePorts,
this has to be done AFTER the iptables rules are programmed.
It can happen that traffic to the NodePort hits the host before
the iptables rules are programmed this will create an stale entry
in conntrack that will blackhole the traffic, so we need to
clear it ONLY when the service has endpoints.

2021-02-10 16:22:03 +01:00

..

BUILD

kube-proxy: clear conntrack entries after rules are in place

2021-02-10 16:22:03 +01:00

OWNERS

pkg/proxy: add sig-network-approvers/sig-network-reviewers to OWNERS files

2019-05-13 10:30:29 -05:00

proxier_test.go

kube-proxy: clear conntrack entries after rules are in place

2021-02-10 16:22:03 +01:00

proxier.go

kube-proxy: clear conntrack entries after rules are in place

2021-02-10 16:22:03 +01:00