2 ms·
We are talking about Kubernetes ingress controllers, in particular, ngnix-based one.
by crabbone 4y ago
We are talking about Kubernetes ingress controllers, in particular, ngnix-based one.
- p_l 4y agoWhich doesn't use DNAT unless you explicitly configure it to do so. nginx-ingress will read Service Endpoints through k8s API and resolve connections to specific pod IPs so long as your network is properly deployed. Of course it's also possible to make it go through serviceIP (which by default is still implemented using DNAT in kube-proxy), but it's not recommended. NodePorts like the example given earlier exist for dealing with external traffic from hosts unaware of (possibly unroutable) serviceIP and podIP ranges. I had lots of !FUN! with nginx-ingress, but that's not one of its faults.