kubernetes - What does kube-proxy `--masquerade-all=true` mean? -


the kube-proxy admin page says:

--masquerade-all       if using pure iptables proxy, snat 

but explain in detail.

  • when should set --masquerade-all true?
  • and problem solves?
  • what happen if set --masquerade-all=false? difference compared --masqurade-all=true?

if enable , route service ip range nodes possible reach service ips outside of cluster.

the discussion in issue #24224 , it's implemented in pr 24429.


Comments

Popular posts from this blog

Retrieving ETA (estimated time of arrival) with Google Distance Matrix API and public transit as transport mode -

android - ConstraintLayout: Realign baseline constraint in case if dependent view visibility was set to GONE -

c# - Populating Gridview inside Listview ItemTemplate On Web User Control from Code Behind -