43 lines
2.5 KiB
Markdown
43 lines
2.5 KiB
Markdown
# kube-proxy
|
||
|
||
## Iptables示例
|
||
|
||
```
|
||
# Iptables –t nat –L –n
|
||
Chain PREROUTING (policy ACCEPT)
|
||
target prot opt source destination
|
||
KUBE-SERVICES all -- anywhere anywhere /* kubernetes service portals */ ← 1
|
||
DOCKER all -- anywhere anywhere ADDRTYPE match dst-type LOCAL
|
||
|
||
Chain KUBE-SEP-G3MLSGWVLUPEIMXS (1 references) ← 4
|
||
target prot opt source destination
|
||
MARK all -- 172.16.16.2 anywhere /* default/webpod-service: */ MARK set 0x4d415351
|
||
DNAT tcp -- anywhere anywhere /* default/webpod-service: */ tcp to:172.16.16.2:80
|
||
|
||
Chain KUBE-SEP-OUBP2X5UG3G4CYYB (1 references)
|
||
target prot opt source destination
|
||
MARK all -- 192.168.190.128 anywhere /* default/kubernetes: */ MARK set 0x4d415351
|
||
DNAT tcp -- anywhere anywhere /* default/kubernetes: */ tcp to:192.168.190.128:6443
|
||
|
||
Chain KUBE-SEP-PXEMGP3B44XONJEO (1 references) ← 4
|
||
target prot opt source destination
|
||
MARK all -- 172.16.91.2 anywhere /* default/webpod-service: */ MARK set 0x4d415351
|
||
DNAT tcp -- anywhere anywhere /* default/webpod-service: */ tcp to:172.16.91.2:80
|
||
|
||
Chain KUBE-SERVICES (2 references) ← 2
|
||
target prot opt source destination
|
||
KUBE-SVC-N4RX4VPNP4ATLCGG tcp -- anywhere 192.168.3.237 /* default/webpod-service: cluster IP */ tcp dpt:http
|
||
KUBE-SVC-6N4SJQIF3IX3FORG tcp -- anywhere 192.168.3.1 /* default/kubernetes: cluster IP */ tcp dpt:https
|
||
KUBE-NODEPORTS all -- anywhere anywhere /* kubernetes service nodeports; NOTE: this must be the last rule in this chain */ ADDRTYPE match dst-type LOCAL
|
||
|
||
Chain KUBE-SVC-6N4SJQIF3IX3FORG (1 references)
|
||
target prot opt source destination
|
||
KUBE-SEP-OUBP2X5UG3G4CYYB all -- anywhere anywhere /* default/kubernetes: */
|
||
|
||
Chain KUBE-SVC-N4RX4VPNP4ATLCGG (1 references) ← 3
|
||
target prot opt source destination
|
||
KUBE-SEP-G3MLSGWVLUPEIMXS all -- anywhere anywhere /* default/webpod-service: */ statistic mode random probability 0.50000000000
|
||
KUBE-SEP-PXEMGP3B44XONJEO all -- anywhere anywhere /* default/webpod-service: */
|
||
```
|
||
|