Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add filter table FORWARD chain rule to forward traffic from "kube-bridge" #120

Closed
murali-reddy opened this issue Aug 11, 2017 · 1 comment
Assignees
Milestone

Comments

@murali-reddy
Copy link
Member

murali-reddy commented Aug 11, 2017

By default Linux has filter table FORWARD chain has default policy as DROP.

Its actually policy by Docker 1.13 moby/moby#28257

Some possible options for CNI plugins kubernetes/kubernetes#40182

I guess Kube-router should add exception atleast to permit the traffic from kube-bridge interface

iptables -A FORWARD -o kube-bridge -j ACCEPT
iptables -A FORWARD -i kube-bridge -j ACCEPT
@murali-reddy
Copy link
Member Author

Testing the patch #127 figured that we need one more rule in case service proxy to permit node-port traffic.

iptables -t filter -A FORWARD -o ens33 -j ACCEPT

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant