mirror of
https://github.com/outbackdingo/kubernetes.git
synced 2026-02-23 19:37:23 +00:00
2ef566d0c3
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>. Fix Forward chain default reject policy for IPVS proxier **What this PR does / why we need it**: Testing with the IPVS mode proxier on a host with iptables FORWARD policy = DROP, as configured by docker in recent versions, I found that traffic to NodePorts failed when the NodePort forwarded the traffic to another node. Saw the iptables FORWARD=DROP counter increasing with each packet. IPVS mode should whitelist such traffic in a similar way to the iptables mode: PR implementing the fix for iptables mode: #52569 **Which issue(s) this PR fixes**: Fixes #59656 **Special notes for your reviewer**: **Release note**: ```release-note Fix Forward chain default reject policy for IPVS proxier ```