You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/en/docs/tasks/administer-cluster/ip-masq-agent.md
+13-5Lines changed: 13 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -44,9 +44,13 @@ traffic to "external" addresses must come from a known machine address. For exam
44
44
Cloud, any traffic to the internet must come from a VM's IP. When containers are used, as in
45
45
Google Kubernetes Engine, the Pod IP will be rejected for egress. To avoid this, we must hide
46
46
the Pod IP behind the VM's own IP address - generally known as "masquerade". By default, the
47
-
agent is configured to treat the three private IP ranges specified by [RFC 1918](https://tools.ietf.org/html/rfc1918) as non-masquerade [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing). These ranges are `10.0.0.0/8`, `172.16.0.0/12`, and
48
-
`192.168.0.0 16`. The agent will also treat link-local (169.254.0.0/16) as a non-masquerade
49
-
CIDR by default. The agent is configured to reload its configuration from the location */etc/config/ip-masq-agent* every 60 seconds, which is also configurable.
47
+
agent is configured to treat the three private IP ranges specified by
48
+
[RFC 1918](https://tools.ietf.org/html/rfc1918) as non-masquerade
More information can be found in the ip-masq-agent documentation [here](https://github.com/kubernetes-sigs/ip-masq-agent)
107
111
108
112
In most cases, the default set of rules should be sufficient; however, if this is not the case
109
-
for your cluster, you can create and apply a [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) to customize the IP ranges that are affected. For example, to allow
110
-
only 10.0.0.0/8 to be considered by the ip-masq-agent, you can create the following [ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) in a file called "config".
113
+
for your cluster, you can create and apply a
114
+
[ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) to customize the IP
115
+
ranges that are affected. For example, to allow
116
+
only 10.0.0.0/8 to be considered by the ip-masq-agent, you can create the following
117
+
[ConfigMap](/docs/tasks/configure-pod-container/configure-pod-configmap/) in a file called
118
+
"config".
111
119
112
120
{{< note >}}
113
121
It is important that the file is called config since, by default, that will be used as the key
0 commit comments