Install flows to skip SNAT for k8s nodes (#2708) #2762
Conversation
|
/test-e2e |
|
/test-all |
|
/test-all |
There was a problem hiding this comment.
In the commit message:
If destination IP is nodeIPs, we must skip SNAT if egress is enabled, no need to forward such packets to the egressIP node
When egress is enabled, we should skip SNAT for traffic to a remote Node's transport IP, as no need to forward such packets through an egress Node.
|
/test-all |
Codecov Report
@@ Coverage Diff @@
## main #2762 +/- ##
==========================================
+ Coverage 60.72% 65.74% +5.02%
==========================================
Files 283 284 +1
Lines 22839 26946 +4107
==========================================
+ Hits 13868 17715 +3847
- Misses 7498 7552 +54
- Partials 1473 1679 +206
Flags with carried forward coverage won't be shown. Click here to find out more.
|
|
@leonstack "Go / Golangci-lint" check failed. Could you fix it so we can merge it? |
OK, I will fix it later. |
When egress is enabled, we should skip SNAT for traffic to a remote Node's transport IP, as no need to forward such packets through an egress Node. Signed-off-by: Yang Li <[email protected]>
|
/test-all |
|
@tnqn hi, seems everything is OK, can you help review this PR again :-) |
|
/test-ipv6 |
It wont affect the default masquerade behavior, and the pod will use the default masquerade to communicate with other NodeIPs. |
If destination IP is nodeIPs, we must skip SNAT if egress is enabled,
no need to forward such packets to the egressIP node
Signed-off-by: Yang Li [email protected]