k8s: NodePort implementation incomplete

monogon-dev / monogon

The Monogon Monorepo. May contain traces of peanuts and a ✨pure Go Linux userland✨. Work in progress!

https://monogon.tech

Apache License 2.0

378 stars 9 forks source link

k8s: NodePort implementation incomplete #242

Open lorenz opened 1 year ago

lorenz commented 1 year ago

nfproxy doesn't fully implement NodePort-specific behavior. Missing are:

Handling externalTrafficPolicy=Local
SNATing all traffic without externalTrafficPolicy=Local (otherwise we do DSR which doesn't work on a lot of systems)

We need to implement this to make NodePort work properly.

lorenz commented 8 months ago

https://review.monogon.dev/c/monogon/+/1924 fixes NodePort with externalTrafficPolicy: Cluster. externalTrafficPolicy: Local is not implemented in nfproxy as far as I can see and will need to wait until we do more load balancer work.