@@ -18,21 +18,21 @@ The `ip-masq-agent` configures iptables rules to hide a pod's IP address behind
18
18
node's IP address. This is typically done when sending traffic to destinations outside the
19
19
cluster's pod [ CIDR] ( https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing ) range.
20
20
21
- ### ** Key Terms**
21
+ ### Key Terms
22
22
23
- * ** NAT (Network Address Translation)**
23
+ * ** NAT (Network Address Translation)** :
24
24
Is a method of remapping one IP address to another by modifying either the source and/or
25
25
destination address information in the IP header. Typically performed by a device doing IP routing.
26
- * ** Masquerading**
26
+ * ** Masquerading** :
27
27
A form of NAT that is typically used to perform a many to one address translation, where
28
28
multiple source IP addresses are masked behind a single address, which is typically the
29
29
device doing the IP routing. In Kubernetes this is the Node's IP address.
30
- * ** CIDR (Classless Inter-Domain Routing)**
30
+ * ** CIDR (Classless Inter-Domain Routing)** :
31
31
Based on the variable-length subnet masking, allows specifying arbitrary-length prefixes.
32
32
CIDR introduced a new method of representation for IP addresses, now commonly known as
33
33
** CIDR notation** , in which an address or routing prefix is written with a suffix indicating
34
34
the number of bits of the prefix, such as 192.168.2.0/24.
35
- * ** Link Local**
35
+ * ** Link Local** :
36
36
A link-local address is a network address that is valid only for communications within the
37
37
network segment or the broadcast domain that the host is connected to. Link-local addresses
38
38
for IPv4 are defined in the address block 169.254.0.0/16 in CIDR notation.
@@ -94,6 +94,7 @@ to your cluster.
94
94
<!-- steps -->
95
95
96
96
## Create an ip-masq-agent
97
+
97
98
To create an ip-masq-agent, run the following kubectl command:
98
99
99
100
``` shell
@@ -107,12 +108,12 @@ agent to run on.
107
108
kubectl label nodes my-node node.kubernetes.io/masq-agent-ds-ready=true
108
109
```
109
110
110
- More information can be found in the ip-masq-agent documentation [ here] ( https://github.com/kubernetes-sigs/ip-masq-agent )
111
+ More information can be found in the ip-masq-agent documentation [ here] ( https://github.com/kubernetes-sigs/ip-masq-agent ) .
111
112
112
113
In most cases, the default set of rules should be sufficient; however, if this is not the case
113
114
for your cluster, you can create and apply a
114
115
[ ConfigMap] ( /docs/tasks/configure-pod-container/configure-pod-configmap/ ) to customize the IP
115
- ranges that are affected. For example, to allow
116
+ ranges that are affected. For example, to allow
116
117
only 10.0.0.0/8 to be considered by the ip-masq-agent, you can create the following
117
118
[ ConfigMap] ( /docs/tasks/configure-pod-container/configure-pod-configmap/ ) in a file called
118
119
"config".
@@ -128,7 +129,7 @@ resyncInterval: 60s
128
129
` ` `
129
130
{{< /note >}}
130
131
131
- Run the following command to add the config map to your cluster:
132
+ Run the following command to add the configmap to your cluster:
132
133
133
134
` ` ` shell
134
135
kubectl create configmap ip-masq-agent --from-file=config --namespace=kube-system
@@ -160,4 +161,3 @@ nonMasqueradeCIDRs:
160
161
resyncInterval : 60s
161
162
masqLinkLocal : true
162
163
` ` `
163
-
0 commit comments