Skip to content

K
k3s
Commit a051a549 authored by Isaac Hollander McCreery's avatar Isaac Hollander McCreery
Browse files
Options

Explicitly set route_localnet on nodes & masters.

Allow for loopback addresses to be used for routing, specifically to enable metadata proxy on master nodes.
parent 40212c17
Hide whitespace changes
Inline Side-by-side
Showing with 5 additions and 0 deletions
cluster/gce/gci/configure-helper.sh
View file @ a051a549
...@@ -34,6 +34,11 @@ function setup-os-params { ...@@ -34,6 +34,11 @@ function setup-os-params {
function config-ip-firewall { function config-ip-firewall {
echo "Configuring IP firewall rules" echo "Configuring IP firewall rules"
# Do not consider loopback addresses as martian source or destination while
# routing. This enables the use of 127/8 for local routing purposes.
sysctl -w net.ipv4.conf.all.route_localnet=1
# The GCI image has host firewall which drop most inbound/forwarded packets. # The GCI image has host firewall which drop most inbound/forwarded packets.
# We need to add rules to accept all TCP/UDP/ICMP packets. # We need to add rules to accept all TCP/UDP/ICMP packets.
if iptables -L INPUT | grep "Chain INPUT (policy DROP)" > /dev/null; then if iptables -L INPUT | grep "Chain INPUT (policy DROP)" > /dev/null; then
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment