kubernetes - What does kube-proxy `--masquerade-all=true` mean? -


the kube-proxy admin page says:

--masquerade-all       if using pure iptables proxy, snat 

but explain in detail.

  • when should set --masquerade-all true?
  • and problem solves?
  • what happen if set --masquerade-all=false? difference compared --masqurade-all=true?

if enable , route service ip range nodes possible reach service ips outside of cluster.

the discussion in issue #24224 , it's implemented in pr 24429.


Comments

Popular posts from this blog

'hasOwnProperty' in javascript -

How to put a lock and transaction on table using spring 4 or above using jdbcTemplate and annotations like @Transactional? -

How to understand 2 main() functions after using uftrace to profile the C++ program? -