Dan Winship c12534d8b4 kubelet, kube-proxy: unmark packets before masquerading them ...

It seems that if you set the packet mark on a packet and then route
that packet through a kernel VXLAN interface, the VXLAN-encapsulated
packet will still have the mark from the original packet. Since our
NAT rules are based on the packet mark, this was causing us to
double-NAT some packets, which then triggered a kernel checksumming
bug. But even without the checksum bug, there are reasons to avoid
double-NATting, so fix the rules to unmark the packets before
masquerading them.

2020-06-15 18:45:38 -04:00

..

apis

kube-proxy: add '--bind-address-hard-fail' flag to treat failure to bind to a port as fatal

2020-04-02 13:13:10 +08:00

config

Run hack/update-vendor.sh

2020-05-16 07:54:33 -04:00

healthcheck

Run hack/update-vendor.sh

2020-05-16 07:54:33 -04:00

iptables

kubelet, kube-proxy: unmark packets before masquerading them

2020-06-15 18:45:38 -04:00

ipvs

kubelet, kube-proxy: unmark packets before masquerading them

2020-06-15 18:45:38 -04:00

metaproxier

Run hack/update-vendor.sh

2020-05-16 07:54:33 -04:00

metrics

pkg/proxy: add last-queued-timestamp metric

2020-04-21 15:19:32 +02:00

userspace

Run hack/update-vendor.sh

2020-05-16 07:54:33 -04:00

util

proxy utils: GetNodeAddresses should check if matching addresses were found

2020-05-26 12:45:32 -04:00

winkernel

Merge pull request #91886 from sbangari/fixsourcevip

2020-06-09 14:49:50 -07:00

winuserspace

Run hack/update-vendor.sh

2020-05-16 07:54:33 -04:00

BUILD

Run hack/update-vendor.sh

2020-05-16 07:54:33 -04:00

doc.go

Use Go canonical import paths

2016-07-16 13:48:21 -04:00

endpoints_test.go

Service Topology implementation

2019-11-15 13:36:43 +08:00

endpoints.go

switch over k/k to use klog v2

2020-05-16 07:54:27 -04:00

endpointslicecache_test.go

Ensuring kube-proxy does not mutate shared EndpointSlices

2019-12-10 13:18:04 -08:00

endpointslicecache.go

switch over k/k to use klog v2

2020-05-16 07:54:27 -04:00

OWNERS

pkg/proxy: add sig-network-approvers/sig-network-reviewers to OWNERS files

2019-05-13 10:30:29 -05:00

service_test.go

kube-proxy filter Load Balancer Status ingress

2020-02-11 10:25:59 +01:00

service.go

switch over k/k to use klog v2

2020-05-16 07:54:27 -04:00

topology_test.go

Service Topology implementation

2019-11-15 13:36:43 +08:00

topology.go

Service Topology implementation

2019-11-15 13:36:43 +08:00

types.go

kube-proxy: log service and endpoint updates

2020-04-10 15:29:44 -07:00