Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IP masquerading issue in k8s cluster worker nodes #141

Open
MohitBairagi opened this issue Sep 22, 2023 · 0 comments
Open

IP masquerading issue in k8s cluster worker nodes #141

MohitBairagi opened this issue Sep 22, 2023 · 0 comments

Comments

@MohitBairagi
Copy link

Hi All,

I have a k8s metal cluster of 3 control nodes and around 25 worker nodes running on laptops with base OS Ubuntu 22.04.1 LTS in which we are also using Canal as CNI plugin. We added some new nodes/laptops in the cluster as worker nodes. Now on these nodes we are facing the Source Network Address Translation(SNAT) or IP masquerading on these nodes.
I realised about this issue, when I found that pod network communication is working both on the same node and also on different nodes, but internet connectivity is not working. I also ran tcpdump to troubleshoot this and found that on those nodes where internet connectivity is working Pod IP gets converted to Node Ip, but on the nodes with issue, Pod IP is not getting converted to Node Ip. Hence traffic leaves from the node with Pod IP and I am assuming that packets are unable to find the path when coming back.

Expected Behavior

Internet connectivity should work on the issue nodes as working on other nodes

Current Behavior

Internet connectivity is not working

Possible Solution

Not Sure

Steps to Reproduce (for bugs)

Unable to reproduce the issue as not sure what is the root cause of the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant