k8snetworkplumbingwg / ovs-cni

Open vSwitch CNI plugin
Apache License 2.0
224 stars 71 forks source link

How to deal with Pod-to-Service traffic #335

Open SMALL-head opened 6 days ago

SMALL-head commented 6 days ago

We know that kubernetes uses iptables to change the serviceIP to the real Pod IP(which is known as DNAT), but when the traffic goes back from the Pod, kubernetes doesn't make something like SNAT, which will lead to RST when establishing TCP connection. So I wonder how to use ovs to handle this trouble. Like adding some conntrack openflow rule?