1

As known, the calico/node could run inside a contianer, including the fleix. I do not understand how it r/w the iptables rules and routes at the host, since both in different network namespace.

kingluo
  • 1,679
  • 1
  • 13
  • 31

1 Answers1

1

Sorry, I forget the container uses host network (--net=host), so it could access the iptables and ip routes on host.

kingluo
  • 1,679
  • 1
  • 13
  • 31