From 7530a35b5bcc0b1fa8b0094e237d75cf1f1414f4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rare=C8=99=20Cosma?= <rares@getbetter.ro>
Date: Fri, 15 Oct 2021 21:48:47 +0200
Subject: [PATCH] prevent kube-proxy from messing the conntrack sys

see: https://github.com/rancher/k3d/issues/612
---
 templates/units/kube-proxy | 1 +
 1 file changed, 1 insertion(+)

diff --git a/templates/units/kube-proxy b/templates/units/kube-proxy
index 2d846f9..238a778 100644
--- a/templates/units/kube-proxy
+++ b/templates/units/kube-proxy
@@ -7,6 +7,7 @@ ExecStart=/kube/bin/kube-proxy \
   --master=http://${MASTER0_IP}:8080 \
   --kubeconfig=/kube/auth/kubelet_kubeconfig \
   --proxy-mode=iptables \
+  --conntrack-max-per-core=0 \
   --masquerade-all \
   --v=2