kubernetes - What does kube-proxy `--masquerade-all=true` mean? -


the kube-proxy admin page says:

--masquerade-all       if using pure iptables proxy, snat 

but explain in detail.

  • when should set --masquerade-all true?
  • and problem solves?
  • what happen if set --masquerade-all=false? difference compared --masqurade-all=true?

if enable , route service ip range nodes possible reach service ips outside of cluster.

the discussion in issue #24224 , it's implemented in pr 24429.


Comments

Popular posts from this blog

'hasOwnProperty' in javascript -

python - ValueError: No axis named 1 for object type <class 'pandas.core.series.Series'> -

java - How to provide dependency injections in Eclipse RCP 3.x? -