{"action":"created","issue":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/6910","labels_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/6910/labels{/name}","comments_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/6910/comments","events_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/6910/events","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/6910","id":68934854,"number":6910,"title":"Should kube-proxy bind to a particular IP?","user":{"login":"justinsb","id":100893,"avatar_url":"https://avatars.githubusercontent.com/u/100893?v=3","gravatar_id":"","url":"https://api.github.com/users/justinsb","html_url":"https://github.com/justinsb","followers_url":"https://api.github.com/users/justinsb/followers","following_url":"https://api.github.com/users/justinsb/following{/other_user}","gists_url":"https://api.github.com/users/justinsb/gists{/gist_id}","starred_url":"https://api.github.com/users/justinsb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/justinsb/subscriptions","organizations_url":"https://api.github.com/users/justinsb/orgs","repos_url":"https://api.github.com/users/justinsb/repos","events_url":"https://api.github.com/users/justinsb/events{/privacy}","received_events_url":"https://api.github.com/users/justinsb/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/kind/design","name":"kind/design","color":"50cba5"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/priority/design","name":"priority/design","color":"c7def8"},{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/labels/team/cluster","name":"team/cluster","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":30,"created_at":"2015-04-16T14:22:30Z","updated_at":"2015-04-28T00:33:05Z","closed_at":null,"body":"FAO @thockin (and any other networking gurus)\r\n\r\nCurrently kube-proxy normally listens on 0.0.0.0 or on the eth0 IP, which causes potential problems with port conflicts when using externally accessible services vs internal kube-proxy services.\r\n\r\nIt would be great if we could listen on 127.0.0.1, but this doesn't work:\r\nhttps://github.com/GoogleCloudPlatform/kubernetes/blob/96bcb56f1065bfcba5ce42c3fa727bdc99dda9f6/pkg/proxy/proxier.go#L740-L741\r\n\r\nThis seems to be the reason why those packets disapper:  http://superuser.com/a/807612\r\n\r\nBy setting `sysctl -w net.ipv4.conf.all.route_localnet=1`, I was able to get DNS to resolve inside a container - running kube-proxy with bind_address=127.0.0.2 to bypass the localhost test :-)\r\n\r\nThis is apparently only in kernel >= 3.6.  Is this something we would want to consider anyway?\r\n\r\nIf not, maybe we could listen on 10.244.x.1, and avoid allocating that IP to a pod.  That seemed to \"work for me\" also.\r\n\r\nIf we did this, I think we avoid all the problems with conflicts between internal & external ports, allowing us to do all the things we've been discussing in the ELB patch & #6684 cleanly. "},"comment":{"url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/comments/96857415","html_url":"https://github.com/GoogleCloudPlatform/kubernetes/issues/6910#issuecomment-96857415","issue_url":"https://api.github.com/repos/GoogleCloudPlatform/kubernetes/issues/6910","id":96857415,"user":{"login":"ArtfulCoder","id":1220660,"avatar_url":"https://avatars.githubusercontent.com/u/1220660?v=3","gravatar_id":"","url":"https://api.github.com/users/ArtfulCoder","html_url":"https://github.com/ArtfulCoder","followers_url":"https://api.github.com/users/ArtfulCoder/followers","following_url":"https://api.github.com/users/ArtfulCoder/following{/other_user}","gists_url":"https://api.github.com/users/ArtfulCoder/gists{/gist_id}","starred_url":"https://api.github.com/users/ArtfulCoder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ArtfulCoder/subscriptions","organizations_url":"https://api.github.com/users/ArtfulCoder/orgs","repos_url":"https://api.github.com/users/ArtfulCoder/repos","events_url":"https://api.github.com/users/ArtfulCoder/events{/privacy}","received_events_url":"https://api.github.com/users/ArtfulCoder/received_events","type":"User","site_admin":false},"created_at":"2015-04-28T00:33:05Z","updated_at":"2015-04-28T00:33:05Z","body":"if you can suggest a way I can get a shell into an older kernel, I can do a manual test.."}}