MaGe Linux Operations
Sep 13, 2021 · Cloud Native
Why HostPort Can Hijack Your Service Traffic in Kubernetes
The article investigates a puzzling Kubernetes issue where using hostPort caused MySQL traffic to be redirected to the wrong pod, explains how iptables rules inserted by the CNI portmap plugin override Service rules, and provides reproducible experiments and practical recommendations to avoid such problems in production.
CNIKubernetesNetworking
0 likes · 11 min read