Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Properly set IP Mode of Load Balancer Addresses to fix internal PROXY traffic #727

Open
apricote opened this issue Aug 22, 2024 · 1 comment · May be fixed by #736
Open

Properly set IP Mode of Load Balancer Addresses to fix internal PROXY traffic #727

apricote opened this issue Aug 22, 2024 · 1 comment · May be fixed by #736
Labels
enhancement New feature or request

Comments

@apricote
Copy link
Member

TL;DR

KEP-1860 introduced a new field service.status.loadBalancer.ingress[].ipMode: VIP | Proxy to indicate the behavior of the Load Balancer.

Currently users on IPVS-based networking setups can not access the Load Balancer IPs when they enable PROXY protocol.

Expected behavior

Users should always be able to access their services from inside of the cluster, even if they use IPVS and PROXY protocol.

IIUC we should set the IP Mode to Proxy for the IPs we return in the status.

@apricote apricote added the enhancement New feature or request label Aug 22, 2024
@BartVB
Copy link

BartVB commented Aug 25, 2024

Would be fantastic if this could be implemented!

I have been banging my head against the wall for quite a bit of time when running into this issue. It results in rather strange/unexpected behaviour in the cluster. Would be a BIG help if this status field could be added to prevent others from wasting time when trying to trace this issue.

Related article with someone else running into this:
https://www.bitahoy.com/blog/post/how-kubernetes-violates-the-principle-of-least-surprise-when-used-with-proxy-protocol-on-hetzner-load-balancers

simonhammes added a commit to simonhammes/hcloud-cloud-controller-manager that referenced this issue Sep 4, 2024
simonhammes added a commit to simonhammes/hcloud-cloud-controller-manager that referenced this issue Sep 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
2 participants