与天地兮比寿，与日月兮齐光。这篇文章主要讲述k8s service到pod映射在iptable中的规则细节相关的知识，希望能为你提供帮助。
[root@master01 ~]# kubectl get svc
NAME
TYPE
CLUSTER-IP
EXTERNAL-IP
PORT(S)
AGE
kubernetes
ClusterIP
10.96.0.1
<
none>
443/TCP
4d12h
service-http
ClusterIP
10.107.131.226
<
none>
8080/TCP
39m
【k8s service到pod映射在iptable中的规则细节】[root@master01 ~]# iptables-save |grep 10.107.131.226
-A KUBE-SERVICES -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-NYSWGRUDJC3U6S64
-A KUBE-SVC-NYSWGRUDJC3U6S64 ! -s 10.244.0.0/16 -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[root@master01 ~]# iptables-save |grep KUBE-SVC-NYSWGRUDJC3U6S64
:KUBE-SVC-NYSWGRUDJC3U6S64 - [0:0]
-A KUBE-SERVICES -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-NYSWGRUDJC3U6S64
-A KUBE-SVC-NYSWGRUDJC3U6S64 ! -s 10.244.0.0/16 -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.16666666651 -j KUBE-SEP-QDKGOYR6XANSZBCN
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-U6HKXH3R2LRDR36W
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-FVCBYTAFEFVVFLLN
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.33333333349 -j KUBE-SEP-7U4KYCANDQRXXIF2
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-7ATG3CQGYD5W7AEY
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -j KUBE-SEP-HE6XDEDMHH5TXHUU
[root@master01 ~]# iptables-save |grep KUBE-SEP-QDKGOYR6XANSZBCN
:KUBE-SEP-QDKGOYR6XANSZBCN - [0:0]
-A KUBE-SEP-QDKGOYR6XANSZBCN -s 10.244.1.15/32 -m comment --comment "default/service-http" -j KUBE-MARK-MASQ
-A KUBE-SEP-QDKGOYR6XANSZBCN -p tcp -m comment --comment "default/service-http" -m tcp -j DNAT --to-destination 10.244.1.15:80
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.16666666651 -j KUBE-SEP-QDKGOYR6XANSZBCN
[root@master01 ~]# iptables-save |grep KUBE-SEP-U6HKXH3R2LRDR36W
:KUBE-SEP-U6HKXH3R2LRDR36W - [0:0]
-A KUBE-SEP-U6HKXH3R2LRDR36W -s 10.244.1.16/32 -m comment --comment "default/service-http" -j KUBE-MARK-MASQ
-A KUBE-SEP-U6HKXH3R2LRDR36W -p tcp -m comment --comment "default/service-http" -m tcp -j DNAT --to-destination 10.244.1.16:80
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-U6HKXH3R2LRDR36W
[root@master01 ~]#
推荐阅读
- 实战案例（Redis集群动态缩容）
- JavaScript进阶必会的手写功能
- Selenium3自动化测试38单元测试Pytest
- 为什么是TypeScript（ 入门篇）
- MySQL中2种方法限制查询超时时间
- 服务器数据恢复意外断电导致FreeNAS中UFS2文件系统故障的数据恢复案例
- 代码审计VauditDemo程序到exp编写_巡安似海
- Hello Playwright（简化部署方式）
- 如何进行 CentOS 8 最小安装（）