Comments (3)
ofiliz
commented on August 19, 2024
Thanks for bringing this up. We need to discuss these use cases with ACS team and understand the requirements better. However, it seems to me that any solutions will need to be in acs-engine. This repo is for Azure CNI plugins. Can you please move this issue to acs-engine repo and add me there?
Also, please see this PR. You can now customize the Kubernetes service subnet directly in acs-engine.
Azure/acs-engine#473
from azure-container-networking.
ashb
commented on August 19, 2024
A thing to note about Kubernetes Service IP ranges: They are not actually routed outside of the nodes but are handled by a DNAT rule (at least when kube-proxy is in the default iptables mode). I'm not sure if this behaves differently with CNI-based network plugins?
from azure-container-networking.
ofiliz
commented on August 19, 2024
Right. That doesn't really have anything to do with CNI plugins. All that the azure-vnet CNI plugin does is to enable IP connectivity in VNET and update the L2 headers so that DNAT'ed frames are switched properly. The Kubernetes service subnet is a logical abstraction implemented by kube-proxy.
from azure-container-networking.
Related Issues (20)
- CNI not setting the Flags in endpoint policies to use IPV6 in case of DualStack cluster HOT 2
- overlay IPAM not reporting version HOT 4
- Azure CNI breaks with Linux kernel 6.2 HOT 2
- Test
- question iptables vs firewalld / non(AKS) Kubernetes HOT 3
- NPM constantly output telemetry errors HOT 2
- Critical CVEs HOT 2
- Add support for port ranges in NetworkPolicy with "endPort" field HOT 3
- On k8s 1.28 (public preview), Windows NPM crash HOT 1
- CNI Installer migration
- Change flow of using Azure Virtual Network Subnet in the Azure Kubernetes Service HOT 4
- Invalid CIDR address when creating Docker network using CNM plugin HOT 1
- Authenticate with Managed Identity from a Docker container connected to an Azure VNet using CNM plugin
- Azure CNI dynamic ip allocation batch size does not starts with 16 HOT 1
- Remove assests from release which are not supported
- Remove CNMS Code HOT 1
- Windows LoopbackDSR policy missing for IPv6 HOT 9
- Remove CNM Code HOT 9
- Unable to send packets from pods on certain nodes to certain pods in the rest of the cluster. HOT 7
- Failed to initialize key-value store of network plugin: error Acquiring store lock: timed out locking store HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from azure-container-networking.