锐客网

  1. 首页 > 睿知 > it技术 > >

k8s service到pod映射在iptable中的规则细节

IT知识serviceiptable

与天地兮比寿，与日月兮齐光。这篇文章主要讲述k8s service到pod映射在iptable中的规则细节相关的知识，希望能为你提供帮助。
[root@master01 ~]# kubectl get svc
NAME           TYPE         CLUSTER-IP       EXTERNAL-IP   PORT(S)     AGE
kubernetes     ClusterIP   10.96.0.1         < none>         443/TCP     4d12h
service-http   ClusterIP   10.107.131.226   < none>         8080/TCP   39m
【k8s service到pod映射在iptable中的规则细节】[root@master01 ~]# iptables-save |grep 10.107.131.226
-A KUBE-SERVICES -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-NYSWGRUDJC3U6S64
-A KUBE-SVC-NYSWGRUDJC3U6S64 ! -s 10.244.0.0/16 -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
[root@master01 ~]# iptables-save |grep KUBE-SVC-NYSWGRUDJC3U6S64
:KUBE-SVC-NYSWGRUDJC3U6S64 - [0:0]
-A KUBE-SERVICES -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-SVC-NYSWGRUDJC3U6S64
-A KUBE-SVC-NYSWGRUDJC3U6S64 ! -s 10.244.0.0/16 -d 10.107.131.226/32 -p tcp -m comment --comment "default/service-http cluster IP" -m tcp --dport 8080 -j KUBE-MARK-MASQ
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.16666666651 -j KUBE-SEP-QDKGOYR6XANSZBCN
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-U6HKXH3R2LRDR36W
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.25000000000 -j KUBE-SEP-FVCBYTAFEFVVFLLN
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.33333333349 -j KUBE-SEP-7U4KYCANDQRXXIF2
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.50000000000 -j KUBE-SEP-7ATG3CQGYD5W7AEY
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -j KUBE-SEP-HE6XDEDMHH5TXHUU
[root@master01 ~]# iptables-save |grep KUBE-SEP-QDKGOYR6XANSZBCN
:KUBE-SEP-QDKGOYR6XANSZBCN - [0:0]
-A KUBE-SEP-QDKGOYR6XANSZBCN -s 10.244.1.15/32 -m comment --comment "default/service-http" -j KUBE-MARK-MASQ
-A KUBE-SEP-QDKGOYR6XANSZBCN -p tcp -m comment --comment "default/service-http" -m tcp -j DNAT --to-destination 10.244.1.15:80
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.16666666651 -j KUBE-SEP-QDKGOYR6XANSZBCN
[root@master01 ~]# iptables-save |grep KUBE-SEP-U6HKXH3R2LRDR36W
:KUBE-SEP-U6HKXH3R2LRDR36W - [0:0]
-A KUBE-SEP-U6HKXH3R2LRDR36W -s 10.244.1.16/32 -m comment --comment "default/service-http" -j KUBE-MARK-MASQ
-A KUBE-SEP-U6HKXH3R2LRDR36W -p tcp -m comment --comment "default/service-http" -m tcp -j DNAT --to-destination 10.244.1.16:80
-A KUBE-SVC-NYSWGRUDJC3U6S64 -m comment --comment "default/service-http" -m statistic --mode random --probability 0.20000000019 -j KUBE-SEP-U6HKXH3R2LRDR36W
[root@master01 ~]#

    推荐阅读


    上一篇：JavaScript进阶必会的手写功能

    下一篇：实战案例（Redis集群动态缩容）