Questions tagged [kube-proxy]

kube-proxy is a component of kubernetes that is responsible for `service` and load balance.

The Kubernetes network proxy runs on each node. This reflects services as defined in the Kubernetes API on each node and can do simple TCP,UDP stream forwarding or round robin TCP,UDP forwarding across a set of backends.

161 questions
1
vote
1 answer

Kubernets PODs running on different host, not able to establish TCP connection

I have Kubernets 1.20.1 cluster with single master and single worker configured with ipvs mode. Using calico CNI calico/cni:v3.16.1. Cluster running on OS RHEL 8 kernel 4.18.0-240.10 with firewalld and selinux disabled. Running one netshoot pod…
sfgroups
  • 18,151
  • 28
  • 132
  • 204
1
vote
1 answer

AKS Kube Proxy doesn't expose metrics

I'm trying to scrape the AKS kube-proxy metrics with Prometheus without success, the reason is that some of the metrics are only exposed to localhost as the following example: tcp LISTEN 0 16384 127.0.0.1:10249 *:* AKS…
1
vote
0 answers

ip forwarding enabled by kube-proxy

I am trying to run kubernetes on a device. And the device have some security concerns. one of them is that i cannot enable packet forwarding on node (host machine). I am run kubernetes 1.16.3 version with kube-proxy in IPVS mode. As soon as…
1
vote
1 answer

What does it means "can't set sysctl net/ipv4/vs/conn_reuse_mode" when set ipvs mode whith k8s?

When I modify kube-proxy mode from iptales to ipvs, after restart the kube-proxy, "kubectl logs kube-proxy" return the following error: server.go:485] unable to create proxier: can't set sysctl net/ipv4/vs/conn_reuse_mode: open…
juzip
  • 11
  • 2
1
vote
1 answer

Inconsistent response from kubernetes api service and getting no route to host error sometimes

I have configured kubernetes cluster using the steps as kubernetes the hard way by kelsey tower Unfortunately i'm seeing inconsistent response when i hit the kubernetes service ip to check the version from worker nodes here are my cluster…
JPNagarajan
  • 802
  • 1
  • 12
  • 32
1
vote
1 answer

Are there two levels of load balancing when using Istio Destination Rules?

As far as I understood, Istio Destination Rules can define load balancing policies to reach a subset of a service, e.g. subset based on different versions of the service. So the Destination Rules are the first level of load balancing. The request…
M. Buil
  • 529
  • 1
  • 4
  • 22
1
vote
1 answer

How does kube apiserver communicates with kubelet and kube-proxy?

I'm interested if I can run k8s with publicly available control plane and worker nodes in network behind firewall (which is edge/iot deployment use-case). The main concern as I believe is communication between apiserver and kubelet/ kube-proxy. Can…
1
vote
1 answer

k8s: forwarding from public VIP to clusterIP with iptables

I'm trying to understand in depth how forwarding from publicly exposed load-balancer's layer-2 VIPs to services' cluster-IPs works. I've read a high-level overview how MetalLB does it and I've tried to replicate it manually by setting…
morgwai
  • 2,513
  • 4
  • 25
  • 31
1
vote
1 answer

Balancing traffic using least connection in Kubernetes

I have a Kubernetes cluster with a deployment like the next one: The goal here is to deploy an application in multiple pods exposed through a ClusterIP service named my-app. The same deployment is made in multiple namespaces (A, B and C), changing…
David Moreno García
  • 4,423
  • 8
  • 49
  • 82
1
vote
1 answer

Does kube-router IPVS-least connection algorithm, does load balancing across pods in same node or different nodes?

The application which I am working on runs as a deployment in kubernetes cluster. Pods created for this deployment is spread across various nodes in the cluster. Our application can handle only one TCP connection at a time and would reject further…
LPT
  • 11
  • 2
1
vote
2 answers

where is Kube-proxy executable on Minikube

minikube ssh $ ps ax | grep kube-proxy 4191 ? Ssl 1:36 /usr/local/bin/kube-proxy --config=/var/lib/kube-proxy/config.conf --hostname-override=minikube 22000 pts/0 S+ 0:00 grep kube-proxy $ ls -l /usr/local/bin/kube-proxy ls:…
dgunjetti
  • 33
  • 4
1
vote
1 answer

kubernetes service can not send request to itself

I have a service that, in some contexts, sends requests to itself. I can reach the service from outside the cluster, but the self-requests fail (time-out). Environment: minikube v0.34.1 Linux version 4.15.0 (jenkins@jenkins) (gcc version 7.3.0…
1
vote
1 answer

How does kube-proxy configure services of type nodePort?

When creating a kubernetes service of type nodePort, kube-proxy configures each worker node to listen on a particular port. How does kube-proxy (in the iptables proxy mode) actually configure this? Is it just done using iptables which opens a port?…
dippynark
  • 2,743
  • 20
  • 58
1
vote
1 answer

Kubernetes service cluster ip not accessible but endpoints ip is accessible from within the node

I setup a single node kubernetes following the kubernetes-the-hard-way guide, except that I'm running on CentOS-7 and I deploy one master and one worker in the same node. I already turn off the firewalld service. After the installation, I deploy a…
cgcgbcbc
  • 539
  • 4
  • 20
1
vote
1 answer

Is it possible to Reverse-dns query for a POD IP address to get its hostname for a Kubernetes Deployment?

I have a deployment where the replicas scale up and down which are all under a headless service. I am able to query ..svc.cluster.local which returns list of all pod IPs. I wanted to know if its possible to query for each pod IP and get the…