Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix return path of NodePort traffic. #130

Merged
merged 1 commit into from
Aug 21, 2018
Merged

Fix return path of NodePort traffic. #130

merged 1 commit into from
Aug 21, 2018

Commits on Aug 2, 2018

  1. Fix return path of NodePort traffic. 

    Add iptables and routing rules that

- connmark traffic that arrives at the host over eth0
- restore the mark when the traffic leaves a pod veth
- force marked traffic to use the main routing table so that it
  exits via eth0.

Configure eth0 RPF check for "loose" filtering to prevent
NodePort traffic from being blocked due to incorrect reverse
path lookup in the kernel.  (The kernel is unable to undo the
NAT as part of its RPF check so it calculates the incorrect
reverse route.)

Add diagnostics for env var configuration and sysctls.

Fixes aws#75
    @fasaxc
    fasaxc committed Aug 2, 2018
    Configuration menu
    Copy the full SHA
    2cce7de View commit details
    Browse the repository at this point in the history