Source pod ip is not preserved when contacting a cluster ip service

Solution In Progress - Updated -

Issue

  • Source pod ip is not preserved when contacting a cluster ip service due to docker adding a masquerade rule. that masqs all packets with a source IP coming from the OpenShift SDN on the node.
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
38774 2326K MASQUERADE  all  --  *      !lbr0   10.1.1.0/24          0.0.0.0/0   

Environment

  • Openshift Container Platform
    • 3.3.1

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.