Commit Graph

23 Commits

Author SHA1 Message Date
Dan Winship 452ea12a48 Simplify nftables/proxier.go by removing localhost nodeport support
and related route_localnet setting / anti-martian-packet rule

Kubernetes-commit: 1a6b9b811e303c033006e9a3223258582149b69b
2023-05-17 15:48:59 -04:00
Dan Winship 4bb0515ddd Add a dummy nftables kube-proxy backend which is just a copy of iptables
Kubernetes-commit: a70653143e928dbe657141f14117e4514681624e
2023-05-09 15:55:04 -04:00
Daman Arora 4e217dd520 pkg/proxy: configure tcp-be-liberal
Signed-off-by: Daman Arora <aroradaman@gmail.com>

Kubernetes-commit: 9ae77364e959da869c59ba5e3149808264ec03be
2023-10-27 00:08:22 +05:30
Dan Winship 0b449dbc91 Rearrange kube-proxy config fields / CLI flags to make more sense.
Kubernetes-commit: 9242cb193488ca769863a4121c153d4ea200d826
2023-08-30 13:01:16 -04:00
Dan Winship 16f6d3d303 Improve kube-proxy config / CLI documentation
Kubernetes-commit: 44cb330aa00fa3bcded1941560693fd3008412c0
2023-08-30 12:50:05 -04:00
Daman Arora cc0bd3193c pkg/proxy: add flag to configure udp conntrack timeouts
Signed-off-by: Daman Arora <aroradaman@gmail.com>

Kubernetes-commit: 15ae6cc1607ee805698b82cd3942afd6a02077ef
2023-09-21 18:52:00 +05:30
cyclinder 0c73cd16c5 add flag 'logging-format' to kube-proxy
Kubernetes-commit: 71ef0dafa72ca8cf2aa26fe1a75d3379a551771a
2023-07-06 22:30:45 +08:00
cyclinder f6ee56b50f kube-proxy: add a flag to disables the allowing NodePort services to be accessed via localhost
Kubernetes-commit: bef207003148dfe061672269003d4727afb5170c
2022-11-02 16:17:52 +08:00
Amim Knabben 46f55fa9c4 Fixing words in the comment
Kubernetes-commit: c0d323f1f61340127f9545cfae08da84eb5ec4cd
2022-10-15 15:54:41 -03:00
Amim Knabben e326d8577e Remove Linux and Windows Kube-proxy Userspace mode
Kubernetes-commit: 7df6c02288833c7be66f425e03c1e858d2343f1f
2022-08-30 17:40:35 -03:00
Surya Seetharaman b85d3adcdd Enable local traffic detection using the interface options
This commit adds the framework for the new local detection
modes BridgeInterface and InterfaceNamePrefix to work.

Signed-off-by: Surya Seetharaman <suryaseetharaman.9@gmail.com>

Kubernetes-commit: 7d480d8ac8e33330af8c8ea863d19d9b547f3bdb
2022-01-29 12:01:09 +01:00
Yongkun Gui c63cc549a9 Fix health check from Google's Load Balancer
This change adds 2 options for windows:
--forward-healthcheck-vip: If true forward service VIP for health check
port
--root-hnsendpoint-name: The name of the hns endpoint name for root
namespace attached to l2bridge, default is cbr0

When --forward-healthcheck-vip is set as true and winkernel is used,
kube-proxy will add an hns load balancer to forward health check request
that was sent to lb_vip:healthcheck_port to the node_ip:healthcheck_port.
Without this forwarding, the health check from google load balancer will
fail, and it will stop forwarding traffic to the windows node.

This change fixes the following 2 cases for service:
- `externalTrafficPolicy: Cluster` (default option): healthcheck_port is
10256 for all services. Without this fix, all traffic won't be directly
forwarded to windows node. It will always go through a linux node and
get forwarded to windows from there.
- `externalTrafficPolicy: Local`: different healthcheck_port for each
service that is configured as local. Without this fix, this feature
won't work on windows node at all. This feature preserves client ip
that tries to connect to their application running in windows pod.

Change-Id: If4513e72900101ef70d86b91155e56a1f8c79719

Kubernetes-commit: 78a507b25647adbf481551c65b900cd817e7a7b3
2021-03-29 23:27:39 +00:00
liuhongyu f52f9fe570 Fix the kube-proxy comment so that the document can be generated correctly
Kubernetes-commit: d1525ec808c2c2ac6987f12cc68acf0b5a776650
2020-10-26 23:13:50 +08:00
SataQiu 3d39bab399 kube-proxy: add '--bind-address-hard-fail' flag to treat failure to bind to a port as fatal
Signed-off-by: SataQiu <1527062125@qq.com>

Kubernetes-commit: 871b90ba23920573e27f75a2c62b8a5362fdb064
2020-04-02 13:13:10 +08:00
Satyadeep Musuvathy cafffb64d4 Refactor handling of local traffic detection.
Kubernetes-commit: 8c6956e5bb4f9557e6ba459f1f6bbcb80e3b5b80
2020-01-16 18:51:31 -08:00
RainbowMango 792da1facd Add show hidden flag to kube-proxy
Kubernetes-commit: 9b7d8712cfa81078593e12dbd0c43f680ab4d910
2019-11-14 17:19:49 +08:00
Andrew Sy Kim 310c8aae97 support configuration of kube-proxy IPVS tcp,tcpfin,udp timeout
Signed-off-by: Andrew Sy Kim <kiman@vmware.com>

Kubernetes-commit: db2c048db9c7572b2bbc66cba3865a258b2a44fa
2019-11-21 18:52:48 -05:00
Vallery Lancey 8978daadb0 Removed deprecated --resource-container flag from kube-proxy.
Kubernetes-commit: dc0f14312e43e6733fc174492be2eaf6eab1cbf5
2019-05-24 04:00:16 -07:00
Ricardo Pchevuzinske Katz 5849b89224 Remove deprecated flag --conntrack-max from kube-proxy
Kubernetes-commit: 82c42bb6eefbec42c0241cbd808c7248bea12f40
2019-05-29 16:36:11 -03:00
Laurent Bernaille 8ac2d13e72 [kube-proxy/ipvs] Add flag to enable strict ARP
Kubernetes-commit: 09f821ddb58dd59e89130f03b75a700061c117a8
2019-03-12 13:50:29 +01:00
ksubrmnn 37f9c67c8a Add Windows flags for KubeProxyConfiguration
Kubernetes-commit: a47e99e37ac7d3cd2099d10df1ff250d1a110fd5
2019-01-11 14:45:34 -08:00
Lucas Käldström ce88fda7f1 Updated references from k8s.io/{apiserver,apimachinery} to the new k8s.io/component-base repo. Co-authored-by @Klaven
Kubernetes-commit: 0140c82c16ebd87a771393a4d39f47435b40c12d
2019-01-06 14:01:26 +02:00
Lion-Wei ded2913d29 move external kube-proxy componentConfig to k8s.io/kube-proxy/config/
Kubernetes-commit: 37e6266ef4b203a3241bf140f36ff8ae29d2e1f7
2018-08-25 15:34:56 +08:00