DumpAny

K8s Service → Pod Traffic Path

Speed:
Ready — Click play to start the demo
K8s Service → Pod Traffic Path
When you hit a Service's ClusterIP, how does the packet get DNAT'd to one of its Pods? From the node entry to the Pod's NIC, then the return path.
💻External Clientcurl svc:80K8s Node（集群内）🔄 kube-proxywatch Endpoints + 写 iptables📦 Service (ClusterIP)my-svc · 10.96.0.1:80🧮 iptables DNAT-A PREROUTING -j DNAT📦 Pod A10.244.1.2:8080📦 Pod B10.244.1.3:8080CNI 网络GET /api → 10.96.0.1:80包进入节点 → iptables 拦下