kubernetes - What does kube-proxy `--masquerade-all=true` mean? -
the kube-proxy admin page says:
--masquerade-all if using pure iptables proxy, snat
but explain in detail.
- when should set
--masquerade-all
true? - and problem solves?
- what happen if set
--masquerade-all=false
? difference compared--masqurade-all=true
?
if enable , route service ip range nodes possible reach service ips outside of cluster.
the discussion in issue #24224 , it's implemented in pr 24429.
Comments
Post a Comment