Service Topology implementation

* Implement Service Topology for ipvs and iptables proxier
* Add test files
* API validation

pkg/proxy/config/config.go

@@ -369,3 +369,128 @@ func (c *ServiceConfig) handleDeleteService(obj interface{}) {
 		c.eventHandlers[i].OnServiceDelete(service)
 	}
 }
+
+// NodeHandler is an abstract interface of objects which receive
+// notifications about node object changes.
+type NodeHandler interface {
+	// OnNodeAdd is called whenever creation of new node object
+	// is observed.
+	OnNodeAdd(node *v1.Node)
+	// OnNodeUpdate is called whenever modification of an existing
+	// node object is observed.
+	OnNodeUpdate(oldNode, node *v1.Node)
+	// OnNodeDelete is called whever deletion of an existing node
+	// object is observed.
+	OnNodeDelete(node *v1.Node)
+	// OnNodeSynced is called once all the initial event handlers were
+	// called and the state is fully propagated to local cache.
+	OnNodeSynced()
+}
+
+// NoopNodeHandler is a noop handler for proxiers that have not yet
+// implemented a full NodeHandler.
+type NoopNodeHandler struct{}
+
+// OnNodeAdd is a noop handler for Node creates.
+func (*NoopNodeHandler) OnNodeAdd(node *v1.Node) {}
+
+// OnNodeUpdate is a noop handler for Node updates.
+func (*NoopNodeHandler) OnNodeUpdate(oldNode, node *v1.Node) {}
+
+// OnNodeDelete is a noop handler for Node deletes.
+func (*NoopNodeHandler) OnNodeDelete(node *v1.Node) {}
+
+// OnNodeSynced is a noop handler for Node syncs.
+func (*NoopNodeHandler) OnNodeSynced() {}
+
+// NodeConfig tracks a set of node configurations.
+// It accepts "set", "add" and "remove" operations of node via channels, and invokes registered handlers on change.
+type NodeConfig struct {
+	listerSynced  cache.InformerSynced
+	eventHandlers []NodeHandler
+}
+
+// NewNodeConfig creates a new NodeConfig.
+func NewNodeConfig(nodeInformer coreinformers.NodeInformer, resyncPeriod time.Duration) *NodeConfig {
+	result := &NodeConfig{
+		listerSynced: nodeInformer.Informer().HasSynced,
+	}
+
+	nodeInformer.Informer().AddEventHandlerWithResyncPeriod(
+		cache.ResourceEventHandlerFuncs{
+			AddFunc:    result.handleAddNode,
+			UpdateFunc: result.handleUpdateNode,
+			DeleteFunc: result.handleDeleteNode,
+		},
+		resyncPeriod,
+	)
+
+	return result
+}
+
+// RegisterEventHandler registers a handler which is called on every node change.
+func (c *NodeConfig) RegisterEventHandler(handler NodeHandler) {
+	c.eventHandlers = append(c.eventHandlers, handler)
+}
+
+// Run starts the goroutine responsible for calling registered handlers.
+func (c *NodeConfig) Run(stopCh <-chan struct{}) {
+	klog.Info("Starting node config controller")
+
+	if !cache.WaitForNamedCacheSync("node config", stopCh, c.listerSynced) {
+		return
+	}
+
+	for i := range c.eventHandlers {
+		klog.V(3).Infof("Calling handler.OnNodeSynced()")
+		c.eventHandlers[i].OnNodeSynced()
+	}
+}
+
+func (c *NodeConfig) handleAddNode(obj interface{}) {
+	node, ok := obj.(*v1.Node)
+	if !ok {
+		utilruntime.HandleError(fmt.Errorf("unexpected object type: %v", obj))
+		return
+	}
+	for i := range c.eventHandlers {
+		klog.V(4).Infof("Calling handler.OnNodeAdd")
+		c.eventHandlers[i].OnNodeAdd(node)
+	}
+}
+
+func (c *NodeConfig) handleUpdateNode(oldObj, newObj interface{}) {
+	oldNode, ok := oldObj.(*v1.Node)
+	if !ok {
+		utilruntime.HandleError(fmt.Errorf("unexpected object type: %v", oldObj))
+		return
+	}
+	node, ok := newObj.(*v1.Node)
+	if !ok {
+		utilruntime.HandleError(fmt.Errorf("unexpected object type: %v", newObj))
+		return
+	}
+	for i := range c.eventHandlers {
+		klog.V(5).Infof("Calling handler.OnNodeUpdate")
+		c.eventHandlers[i].OnNodeUpdate(oldNode, node)
+	}
+}
+
+func (c *NodeConfig) handleDeleteNode(obj interface{}) {
+	node, ok := obj.(*v1.Node)
+	if !ok {
+		tombstone, ok := obj.(cache.DeletedFinalStateUnknown)
+		if !ok {
+			utilruntime.HandleError(fmt.Errorf("unexpected object type: %v", obj))
+			return
+		}
+		if node, ok = tombstone.Obj.(*v1.Node); !ok {
+			utilruntime.HandleError(fmt.Errorf("unexpected object type: %v", obj))
+			return
+		}
+	}
+	for i := range c.eventHandlers {
+		klog.V(4).Infof("Calling handler.OnNodeDelete")
+		c.eventHandlers[i].OnNodeDelete(node)
+	}
+}

pkg/proxy/endpoints.go

@@ -48,7 +48,8 @@ var supportedEndpointSliceAddressTypes = sets.NewString(
 type BaseEndpointInfo struct {
 	Endpoint string // TODO: should be an endpointString type
 	// IsLocal indicates whether the endpoint is running in same host as kube-proxy.
-	IsLocal bool
+	IsLocal  bool
+	Topology map[string]string
 }
 
 var _ Endpoint = &BaseEndpointInfo{}
@@ -63,6 +64,11 @@ func (info *BaseEndpointInfo) GetIsLocal() bool {
 	return info.IsLocal
 }
 
+// GetTopology returns the topology information of the endpoint.
+func (info *BaseEndpointInfo) GetTopology() map[string]string {
+	return info.Topology
+}
+
 // IP returns just the IP part of the endpoint, it's a part of proxy.Endpoint interface.
 func (info *BaseEndpointInfo) IP() string {
 	return utilproxy.IPPart(info.Endpoint)
@@ -78,10 +84,11 @@ func (info *BaseEndpointInfo) Equal(other Endpoint) bool {
 	return info.String() == other.String() && info.GetIsLocal() == other.GetIsLocal()
 }
 
-func newBaseEndpointInfo(IP string, port int, isLocal bool) *BaseEndpointInfo {
+func newBaseEndpointInfo(IP string, port int, isLocal bool, topology map[string]string) *BaseEndpointInfo {
 	return &BaseEndpointInfo{
 		Endpoint: net.JoinHostPort(IP, strconv.Itoa(port)),
 		IsLocal:  isLocal,
+		Topology: topology,
 	}
 }
 
@@ -358,7 +365,7 @@ func (ect *EndpointChangeTracker) endpointsToEndpointsMap(endpoints *v1.Endpoint
 					continue
 				}
 				isLocal := addr.NodeName != nil && *addr.NodeName == ect.hostname
-				baseEndpointInfo := newBaseEndpointInfo(addr.IP, int(port.Port), isLocal)
+				baseEndpointInfo := newBaseEndpointInfo(addr.IP, int(port.Port), isLocal, nil)
 				if ect.makeEndpointInfo != nil {
 					endpointsMap[svcPortName] = append(endpointsMap[svcPortName], ect.makeEndpointInfo(baseEndpointInfo))
 				} else {

pkg/proxy/endpoints_test.go

@@ -400,7 +400,7 @@ func TestEndpointsToEndpointsMap(t *testing.T) {
 			} else {
 				for i := range newEndpoints[x] {
 					ep := newEndpoints[x][i].(*BaseEndpointInfo)
-					if *ep != *(tc.expected[x][i]) {
+					if !(reflect.DeepEqual(*ep, *(tc.expected[x][i]))) {
 						t.Errorf("[%s] expected new[%v][%d] to be %v, got %v", tc.desc, x, i, tc.expected[x][i], *ep)
 					}
 				}
@@ -1699,21 +1699,21 @@ func TestCheckoutChanges(t *testing.T) {
 			endpointChangeTracker: NewEndpointChangeTracker("", nil, nil, nil, false),
 			expectedChanges: []*endpointsChange{{
 				previous: EndpointsMap{
-					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80"), newTestEp("10.0.1.2:80")},
-					svcPortName1: []Endpoint{newTestEp("10.0.1.1:443"), newTestEp("10.0.1.2:443")},
+					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80", ""), newTestEp("10.0.1.2:80", "")},
+					svcPortName1: []Endpoint{newTestEp("10.0.1.1:443", ""), newTestEp("10.0.1.2:443", "")},
 				},
 				current: EndpointsMap{
-					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80"), newTestEp("10.0.1.2:80")},
+					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80", ""), newTestEp("10.0.1.2:80", "")},
 				},
 			}},
 			items: map[types.NamespacedName]*endpointsChange{
 				{Namespace: "ns1", Name: "svc1"}: {
 					previous: EndpointsMap{
-						svcPortName0: []Endpoint{newTestEp("10.0.1.1:80"), newTestEp("10.0.1.2:80")},
-						svcPortName1: []Endpoint{newTestEp("10.0.1.1:443"), newTestEp("10.0.1.2:443")},
+						svcPortName0: []Endpoint{newTestEp("10.0.1.1:80", ""), newTestEp("10.0.1.2:80", "")},
+						svcPortName1: []Endpoint{newTestEp("10.0.1.1:443", ""), newTestEp("10.0.1.2:443", "")},
 					},
 					current: EndpointsMap{
-						svcPortName0: []Endpoint{newTestEp("10.0.1.1:80"), newTestEp("10.0.1.2:80")},
+						svcPortName0: []Endpoint{newTestEp("10.0.1.1:80", ""), newTestEp("10.0.1.2:80", "")},
 					},
 				},
 			},
@@ -1724,7 +1724,7 @@ func TestCheckoutChanges(t *testing.T) {
 			expectedChanges: []*endpointsChange{{
 				previous: EndpointsMap{},
 				current: EndpointsMap{
-					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80"), newTestEp("10.0.1.2:80")},
+					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80", "host1"), newTestEp("10.0.1.2:80", "host1")},
 				},
 			}},
 			useEndpointSlices: true,
@@ -1737,11 +1737,11 @@ func TestCheckoutChanges(t *testing.T) {
 			endpointChangeTracker: NewEndpointChangeTracker("", nil, nil, nil, true),
 			expectedChanges: []*endpointsChange{{
 				previous: EndpointsMap{
-					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80"), newTestEp("10.0.1.2:80")},
-					svcPortName1: []Endpoint{newTestEp("10.0.1.1:443"), newTestEp("10.0.1.2:443")},
+					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80", "host1"), newTestEp("10.0.1.2:80", "host1")},
+					svcPortName1: []Endpoint{newTestEp("10.0.1.1:443", "host1"), newTestEp("10.0.1.2:443", "host1")},
 				},
 				current: EndpointsMap{
-					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80"), newTestEp("10.0.1.2:80")},
+					svcPortName0: []Endpoint{newTestEp("10.0.1.1:80", "host1"), newTestEp("10.0.1.2:80", "host1")},
 				},
 			}},
 			useEndpointSlices: true,
@@ -1796,6 +1796,9 @@ func compareEndpointsMapsStr(t *testing.T, newMap EndpointsMap, expected map[Ser
 	if len(newMap) != len(expected) {
 		t.Errorf("expected %d results, got %d: %v", len(expected), len(newMap), newMap)
 	}
+	endpointEqual := func(a, b *BaseEndpointInfo) bool {
+		return a.Endpoint == b.Endpoint && a.IsLocal == b.IsLocal
+	}
 	for x := range expected {
 		if len(newMap[x]) != len(expected[x]) {
 			t.Errorf("expected %d endpoints for %v, got %d", len(expected[x]), x, len(newMap[x]))
@@ -1807,7 +1810,7 @@ func compareEndpointsMapsStr(t *testing.T, newMap EndpointsMap, expected map[Ser
 					t.Errorf("Failed to cast endpointsInfo")
 					continue
 				}
-				if *newEp != *(expected[x][i]) {
+				if !endpointEqual(newEp, expected[x][i]) {
 					t.Errorf("expected new[%v][%d] to be %v, got %v (IsLocal expected %v, got %v)", x, i, expected[x][i], newEp, expected[x][i].IsLocal, newEp.IsLocal)
 				}
 			}
@@ -1815,8 +1818,14 @@ func compareEndpointsMapsStr(t *testing.T, newMap EndpointsMap, expected map[Ser
 	}
 }
 
-func newTestEp(ep string) *BaseEndpointInfo {
-	return &BaseEndpointInfo{Endpoint: ep}
+func newTestEp(ep, host string) *BaseEndpointInfo {
+	endpointInfo := &BaseEndpointInfo{Endpoint: ep}
+	if host != "" {
+		endpointInfo.Topology = map[string]string{
+			"kubernetes.io/hostname": host,
+		}
+	}
+	return endpointInfo
 }
 
 func initializeCache(endpointSliceCache *EndpointSliceCache, endpointSlices []*discovery.EndpointSlice) {

pkg/proxy/endpointslicecache.go

@@ -254,7 +254,7 @@ func (cache *EndpointSliceCache) addEndpointsByIP(serviceNN types.NamespacedName
 		}
 
 		isLocal := cache.isLocal(endpoint.Topology[v1.LabelHostname])
-		endpointInfo := newBaseEndpointInfo(endpoint.Addresses[0], portNum, isLocal)
+		endpointInfo := newBaseEndpointInfo(endpoint.Addresses[0], portNum, isLocal, endpoint.Topology)
 
 		// This logic ensures we're deduping potential overlapping endpoints
 		// isLocal should not vary between matching IPs, but if it does, we

pkg/proxy/endpointslicecache_test.go

@@ -176,9 +176,9 @@ func TestEndpointInfoByServicePort(t *testing.T) {
 			},
 			expectedMap: spToEndpointMap{
 				makeServicePortName("ns1", "svc1", "port-0", v1.ProtocolTCP): {
-					"10.0.1.1": &BaseEndpointInfo{Endpoint: "10.0.1.1:80", IsLocal: false},
-					"10.0.1.2": &BaseEndpointInfo{Endpoint: "10.0.1.2:80", IsLocal: true},
-					"10.0.1.3": &BaseEndpointInfo{Endpoint: "10.0.1.3:80", IsLocal: false},
+					"10.0.1.1": &BaseEndpointInfo{Endpoint: "10.0.1.1:80", IsLocal: false, Topology: map[string]string{"kubernetes.io/hostname": "host2"}},
+					"10.0.1.2": &BaseEndpointInfo{Endpoint: "10.0.1.2:80", IsLocal: true, Topology: map[string]string{"kubernetes.io/hostname": "host1"}},
+					"10.0.1.3": &BaseEndpointInfo{Endpoint: "10.0.1.3:80", IsLocal: false, Topology: map[string]string{"kubernetes.io/hostname": "host2"}},
 				},
 			},
 		},

pkg/proxy/iptables/proxier.go

@@ -181,6 +181,7 @@ type Proxier struct {
 	serviceMap   proxy.ServiceMap
 	endpointsMap proxy.EndpointsMap
 	portsMap     map[utilproxy.LocalPort]utilproxy.Closeable
+	nodeLabels   map[string]string
 	// endpointsSynced, endpointSlicesSynced, and servicesSynced are set to true
 	// when corresponding objects are synced after startup. This is used to avoid
 	// updating iptables with some partial data after kube-proxy restart.
@@ -591,6 +592,47 @@ func (proxier *Proxier) OnEndpointSlicesSynced() {
 	proxier.syncProxyRules()
 }
 
+// OnNodeAdd is called whenever creation of new node object
+// is observed.
+func (proxier *Proxier) OnNodeAdd(node *v1.Node) {
+	if node.Name != proxier.hostname {
+		klog.Errorf("Received a watch event for a node %s that doesn't match the current node %v", node.Name, proxier.hostname)
+		return
+	}
+	proxier.mu.Lock()
+	proxier.nodeLabels = node.Labels
+	proxier.mu.Unlock()
+}
+
+// OnNodeUpdate is called whenever modification of an existing
+// node object is observed.
+func (proxier *Proxier) OnNodeUpdate(oldNode, node *v1.Node) {
+	if node.Name != proxier.hostname {
+		klog.Errorf("Received a watch event for a node %s that doesn't match the current node %v", node.Name, proxier.hostname)
+		return
+	}
+	proxier.mu.Lock()
+	proxier.nodeLabels = node.Labels
+	proxier.mu.Unlock()
+}
+
+// OnNodeDelete is called whever deletion of an existing node
+// object is observed.
+func (proxier *Proxier) OnNodeDelete(node *v1.Node) {
+	if node.Name != proxier.hostname {
+		klog.Errorf("Received a watch event for a node %s that doesn't match the current node %v", node.Name, proxier.hostname)
+		return
+	}
+	proxier.mu.Lock()
+	proxier.nodeLabels = nil
+	proxier.mu.Unlock()
+}
+
+// OnNodeSynced is called once all the initial event handlers were
+// called and the state is fully propagated to local cache.
+func (proxier *Proxier) OnNodeSynced() {
+}
+
 // portProtoHash takes the ServicePortName and protocol for a service
 // returns the associated 16 character hash. This is computed by hashing (sha256)
 // then encoding to base32 and truncating to 16 chars. We do this because IPTables
@@ -858,7 +900,20 @@ func (proxier *Proxier) syncProxyRules() {
 		isIPv6 := utilnet.IsIPv6(svcInfo.ClusterIP())
 		protocol := strings.ToLower(string(svcInfo.Protocol()))
 		svcNameString := svcInfo.serviceNameString
-		hasEndpoints := len(proxier.endpointsMap[svcName]) > 0
+
+		allEndpoints := proxier.endpointsMap[svcName]
+
+		hasEndpoints := len(allEndpoints) > 0
+
+		// Service Topology will not be enabled in the following cases:
+		// 1. externalTrafficPolicy=Local (mutually exclusive with service topology).
+		// 2. ServiceTopology is not enabled.
+		// 3. EndpointSlice is not enabled (service topology depends on endpoint slice
+		// to get topology information).
+		if !svcInfo.OnlyNodeLocalEndpoints() && utilfeature.DefaultFeatureGate.Enabled(features.ServiceTopology) && utilfeature.DefaultFeatureGate.Enabled(features.EndpointSlice) {
+			allEndpoints = proxy.FilterTopologyEndpoint(proxier.nodeLabels, svcInfo.TopologyKeys(), allEndpoints)
+			hasEndpoints = len(allEndpoints) > 0
+		}
 
 		svcChain := svcInfo.servicePortChainName
 		if hasEndpoints {
@@ -1168,12 +1223,13 @@ func (proxier *Proxier) syncProxyRules() {
 		endpoints = endpoints[:0]
 		endpointChains = endpointChains[:0]
 		var endpointChain utiliptables.Chain
-		for _, ep := range proxier.endpointsMap[svcName] {
+		for _, ep := range allEndpoints {
 			epInfo, ok := ep.(*endpointsInfo)
 			if !ok {
 				klog.Errorf("Failed to cast endpointsInfo %q", ep.String())
 				continue
 			}
+
 			endpoints = append(endpoints, epInfo)
 			endpointChain = epInfo.endpointChain(svcNameString, protocol)
 			endpointChains = append(endpointChains, endpointChain)
@@ -1220,6 +1276,7 @@ func (proxier *Proxier) syncProxyRules() {
 				// Error parsing this endpoint has been logged. Skip to next endpoint.
 				continue
 			}
+
 			// Balancing rules in the per-service chain.
 			args = append(args[:0], "-A", string(svcChain))
 			proxier.appendServiceCommentLocked(args, svcNameString)

pkg/proxy/ipvs/meta_proxier.go

@@ -22,6 +22,8 @@ import (
 	"k8s.io/api/core/v1"
 	"k8s.io/klog"
 	"k8s.io/kubernetes/pkg/proxy"
+	"k8s.io/kubernetes/pkg/proxy/config"
+
 	utilnet "k8s.io/utils/net"
 
 	discovery "k8s.io/api/discovery/v1beta1"
@@ -30,6 +32,8 @@ import (
 type metaProxier struct {
 	ipv4Proxier proxy.Provider
 	ipv6Proxier proxy.Provider
+	// TODO(imroc): implement node handler for meta proxier.
+	config.NoopNodeHandler
 }
 
 // NewMetaProxier returns a dual-stack "meta-proxier". Proxier API

pkg/proxy/ipvs/proxier.go

@@ -30,6 +30,10 @@ import (
 	"sync/atomic"
 	"time"
 
+	"k8s.io/klog"
+	utilexec "k8s.io/utils/exec"
+	utilnet "k8s.io/utils/net"
+
 	v1 "k8s.io/api/core/v1"
 	discovery "k8s.io/api/discovery/v1beta1"
 	"k8s.io/apimachinery/pkg/types"
@@ -38,7 +42,6 @@ import (
 	"k8s.io/apimachinery/pkg/util/wait"
 	utilfeature "k8s.io/apiserver/pkg/util/feature"
 	"k8s.io/client-go/tools/record"
-	"k8s.io/klog"
 	"k8s.io/kubernetes/pkg/features"
 	"k8s.io/kubernetes/pkg/proxy"
 	"k8s.io/kubernetes/pkg/proxy/healthcheck"
@@ -50,8 +53,6 @@ import (
 	utiliptables "k8s.io/kubernetes/pkg/util/iptables"
 	utilipvs "k8s.io/kubernetes/pkg/util/ipvs"
 	utilsysctl "k8s.io/kubernetes/pkg/util/sysctl"
-	utilexec "k8s.io/utils/exec"
-	utilnet "k8s.io/utils/net"
 )
 
 const (
@@ -200,6 +201,7 @@ type Proxier struct {
 	serviceMap   proxy.ServiceMap
 	endpointsMap proxy.EndpointsMap
 	portsMap     map[utilproxy.LocalPort]utilproxy.Closeable
+	nodeLabels   map[string]string
 	// endpointsSynced, endpointSlicesSynced, and servicesSynced are set to true when
 	// corresponding objects are synced after startup. This is used to avoid updating
 	// ipvs rules with some partial data after kube-proxy restart.
@@ -896,6 +898,47 @@ func (proxier *Proxier) OnEndpointSlicesSynced() {
 	proxier.syncProxyRules()
 }
 
+// OnNodeAdd is called whenever creation of new node object
+// is observed.
+func (proxier *Proxier) OnNodeAdd(node *v1.Node) {
+	if node.Name != proxier.hostname {
+		klog.Errorf("Received a watch event for a node %s that doesn't match the current node %v", node.Name, proxier.hostname)
+		return
+	}
+	proxier.mu.Lock()
+	proxier.nodeLabels = node.Labels
+	proxier.mu.Unlock()
+}
+
+// OnNodeUpdate is called whenever modification of an existing
+// node object is observed.
+func (proxier *Proxier) OnNodeUpdate(oldNode, node *v1.Node) {
+	if node.Name != proxier.hostname {
+		klog.Errorf("Received a watch event for a node %s that doesn't match the current node %v", node.Name, proxier.hostname)
+		return
+	}
+	proxier.mu.Lock()
+	proxier.nodeLabels = node.Labels
+	proxier.mu.Unlock()
+}
+
+// OnNodeDelete is called whever deletion of an existing node
+// object is observed.
+func (proxier *Proxier) OnNodeDelete(node *v1.Node) {
+	if node.Name != proxier.hostname {
+		klog.Errorf("Received a watch event for a node %s that doesn't match the current node %v", node.Name, proxier.hostname)
+		return
+	}
+	proxier.mu.Lock()
+	proxier.nodeLabels = nil
+	proxier.mu.Unlock()
+}
+
+// OnNodeSynced is called once all the initial event handlers were
+// called and the state is fully propagated to local cache.
+func (proxier *Proxier) OnNodeSynced() {
+}
+
 // EntryInvalidErr indicates if an ipset entry is invalid or not
 const EntryInvalidErr = "error adding entry %s to ipset %s"
 
@@ -1866,7 +1909,18 @@ func (proxier *Proxier) syncEndpoint(svcPortName proxy.ServicePortName, onlyNode
 		curEndpoints.Insert(des.String())
 	}
 
-	for _, epInfo := range proxier.endpointsMap[svcPortName] {
+	endpoints := proxier.endpointsMap[svcPortName]
+
+	// Service Topology will not be enabled in the following cases:
+	// 1. externalTrafficPolicy=Local (mutually exclusive with service topology).
+	// 2. ServiceTopology is not enabled.
+	// 3. EndpointSlice is not enabled (service topology depends on endpoint slice
+	// to get topology information).
+	if !onlyNodeLocalEndpoints && utilfeature.DefaultFeatureGate.Enabled(features.ServiceTopology) && utilfeature.DefaultFeatureGate.Enabled(features.EndpointSlice) {
+		endpoints = proxy.FilterTopologyEndpoint(proxier.nodeLabels, proxier.serviceMap[svcPortName].TopologyKeys(), endpoints)
+	}
+
+	for _, epInfo := range endpoints {
 		if onlyNodeLocalEndpoints && !epInfo.GetIsLocal() {
 			continue
 		}

pkg/proxy/ipvs/proxier_test.go

@@ -2951,7 +2951,7 @@ func compareEndpointsMaps(t *testing.T, tci int, newMap proxy.EndpointsMap, expe
 					t.Errorf("Failed to cast proxy.BaseEndpointInfo")
 					continue
 				}
-				if *newEp != *(expected[x][i]) {
+				if !reflect.DeepEqual(*newEp, *(expected[x][i])) {
 					t.Errorf("[%d] expected new[%v][%d] to be %v, got %v", tci, x, i, expected[x][i], newEp)
 				}
 			}
@@ -3702,7 +3702,6 @@ func TestEndpointSliceE2E(t *testing.T) {
 	// Add initial service
 	serviceName := "svc1"
 	namespaceName := "ns1"
-
 	fp.OnServiceAdd(&v1.Service{
 		ObjectMeta: metav1.ObjectMeta{Name: serviceName, Namespace: namespaceName},
 		Spec: v1.ServiceSpec{

pkg/proxy/service.go

@@ -51,6 +51,7 @@ type BaseServiceInfo struct {
 	loadBalancerSourceRanges []string
 	healthCheckNodePort      int
 	onlyNodeLocalEndpoints   bool
+	topologyKeys             []string
 }
 
 var _ ServicePort = &BaseServiceInfo{}
@@ -119,6 +120,11 @@ func (info *BaseServiceInfo) OnlyNodeLocalEndpoints() bool {
 	return info.onlyNodeLocalEndpoints
 }
 
+// TopologyKeys is part of ServicePort interface.
+func (info *BaseServiceInfo) TopologyKeys() []string {
+	return info.topologyKeys
+}
+
 func (sct *ServiceChangeTracker) newBaseServiceInfo(port *v1.ServicePort, service *v1.Service) *BaseServiceInfo {
 	onlyNodeLocalEndpoints := false
 	if apiservice.RequestsOnlyLocalTraffic(service) {
@@ -139,6 +145,7 @@ func (sct *ServiceChangeTracker) newBaseServiceInfo(port *v1.ServicePort, servic
 		sessionAffinityType:    service.Spec.SessionAffinity,
 		stickyMaxAgeSeconds:    stickyMaxAgeSeconds,
 		onlyNodeLocalEndpoints: onlyNodeLocalEndpoints,
+		topologyKeys:           service.Spec.TopologyKeys,
 	}
 
 	if sct.isIPv6Mode == nil {

pkg/proxy/topology.go

@@ -0,0 +1,80 @@
+/*
+Copyright 2019 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package proxy
+
+import (
+	v1 "k8s.io/api/core/v1"
+)
+
+// FilterTopologyEndpoint returns the appropriate endpoints based on the cluster
+// topology.
+// This uses the current node's labels, which contain topology information, and
+// the required topologyKeys to find appropriate endpoints. If both the endpoint's
+// topology and the current node have matching values for topologyKeys[0], the
+// endpoint will be chosen.  If no endpoints are chosen, toplogyKeys[1] will be
+// considered, and so on.  If either the node or the endpoint do not have values
+// for a key, it is considered to not match.
+//
+// If topologyKeys is specified, but no endpoints are chosen for any key, the
+// the service has no viable endpoints for clients on this node, and connections
+// should fail.
+//
+// The special key "*" may be used as the last entry in topologyKeys to indicate
+// "any endpoint" is acceptable.
+//
+// If topologyKeys is not specified or empty, no topology constraints will be
+// applied and this will return all endpoints.
+func FilterTopologyEndpoint(nodeLabels map[string]string, topologyKeys []string, endpoints []Endpoint) []Endpoint {
+	// Do not filter endpoints if service has no topology keys.
+	if len(topologyKeys) == 0 {
+		return endpoints
+	}
+
+	filteredEndpoint := []Endpoint{}
+
+	if len(nodeLabels) == 0 {
+		if topologyKeys[len(topologyKeys)-1] == v1.TopologyKeyAny {
+			// edge case: include all endpoints if topology key "Any" specified
+			// when we cannot determine current node's topology.
+			return endpoints
+		}
+		// edge case: do not include any endpoints if topology key "Any" is
+		// not specified when we cannot determine current node's topology.
+		return filteredEndpoint
+	}
+
+	for _, key := range topologyKeys {
+		if key == v1.TopologyKeyAny {
+			return endpoints
+		}
+		topologyValue, found := nodeLabels[key]
+		if !found {
+			continue
+		}
+
+		for _, ep := range endpoints {
+			topology := ep.GetTopology()
+			if value, found := topology[key]; found && value == topologyValue {
+				filteredEndpoint = append(filteredEndpoint, ep)
+			}
+		}
+		if len(filteredEndpoint) > 0 {
+			return filteredEndpoint
+		}
+	}
+	return filteredEndpoint
+}

pkg/proxy/topology_test.go

@@ -0,0 +1,478 @@
+/*
+Copyright 2019 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package proxy
+
+import (
+	"reflect"
+	"testing"
+
+	v1 "k8s.io/api/core/v1"
+	"k8s.io/apimachinery/pkg/types"
+)
+
+func TestFilterTopologyEndpoint(t *testing.T) {
+	type endpoint struct {
+		Endpoint string
+		NodeName types.NodeName
+	}
+	testCases := []struct {
+		Name            string
+		nodeLabels      map[types.NodeName]map[string]string
+		endpoints       []endpoint
+		currentNodeName types.NodeName
+		topologyKeys    []string
+		expected        []endpoint
+	}{
+		{
+			// Case[0]: no topology key and endpoints at all = 0 endpoints
+			Name: "no topology key and endpoints",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "10.0.0.1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				}},
+			endpoints:       []endpoint{},
+			currentNodeName: "testNode1",
+			topologyKeys:    nil,
+			expected:        []endpoint{},
+		},
+		{
+			// Case[1]: no topology key, 2 nodes each with 2 endpoints = 4
+			// endpoints
+			Name: "no topology key but have endpoints",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+			currentNodeName: "testNode1",
+			topologyKeys:    nil,
+			expected: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+		},
+		{
+			// Case[2]: 1 topology key (hostname), 2 nodes each with 2 endpoints
+			// 1 match = 2 endpoints
+			Name: "one topology key with one node matched",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+			currentNodeName: "testNode1",
+			topologyKeys:    []string{"kubernetes.io/hostname"},
+			expected: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+			},
+		},
+		{
+			// Case[3]: 1 topology key (hostname), 2 nodes each with 2 endpoints
+			// no match = 0 endpoints
+			Name: "one topology key without node matched",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode3": {
+					"kubernetes.io/hostname":        "testNode3",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+			currentNodeName: "testNode3",
+			topologyKeys:    []string{"kubernetes.io/hostname"},
+			expected:        []endpoint{},
+		},
+		{
+			// Case[4]: 1 topology key (zone), 2 nodes in zone a, 2 nodes in
+			// zone b, each with 2 endpoints = 4 endpoints
+			Name: "one topology key with multiple nodes matched",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode3": {
+					"kubernetes.io/hostname":        "testNode3",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode4": {
+					"kubernetes.io/hostname":        "testNode4",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.3.1:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.3.2:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.4.1:11", NodeName: "testNode4"},
+				{Endpoint: "1.1.4.2:11", NodeName: "testNode4"},
+			},
+			currentNodeName: "testNode2",
+			topologyKeys:    []string{"topology.kubernetes.io/zone"},
+			expected: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+		},
+		{
+			// Case[5]: 2 topology keys (hostname, zone), 2 nodes each with 2
+			// endpoints, 1 hostname match = 2 endpoints (2nd key ignored)
+			Name: "early match in multiple topology keys",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode3": {
+					"kubernetes.io/hostname":        "testNode3",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode4": {
+					"kubernetes.io/hostname":        "testNode4",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.3.1:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.3.2:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.4.1:11", NodeName: "testNode4"},
+				{Endpoint: "1.1.4.2:11", NodeName: "testNode4"},
+			},
+			currentNodeName: "testNode2",
+			topologyKeys:    []string{"kubernetes.io/hostname"},
+			expected: []endpoint{
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+		},
+		{
+			// Case[6]: 2 topology keys (hostname, zone), 2 nodes in zone a, 2
+			// nodes in zone b, each with 2 endpoints, no hostname match, 1 zone
+			// match = 4 endpoints
+			Name: "later match in multiple topology keys",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode3": {
+					"kubernetes.io/hostname":        "testNode3",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode4": {
+					"kubernetes.io/hostname":        "testNode4",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode5": {
+					"kubernetes.io/hostname":        "testNode5",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.3.1:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.3.2:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.4.1:11", NodeName: "testNode4"},
+				{Endpoint: "1.1.4.2:11", NodeName: "testNode4"},
+			},
+			currentNodeName: "testNode5",
+			topologyKeys:    []string{"kubernetes.io/hostname", "topology.kubernetes.io/zone"},
+			expected: []endpoint{
+				{Endpoint: "1.1.3.1:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.3.2:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.4.1:11", NodeName: "testNode4"},
+				{Endpoint: "1.1.4.2:11", NodeName: "testNode4"},
+			},
+		},
+		{
+			// Case[7]: 2 topology keys (hostname, zone), 2 nodes in zone a, 2
+			// nodes in zone b, each with 2 endpoints, no hostname match, no zone
+			// match = 0 endpoints
+			Name: "multiple topology keys without node matched",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode3": {
+					"kubernetes.io/hostname":        "testNode3",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode4": {
+					"kubernetes.io/hostname":        "testNode4",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode5": {
+					"kubernetes.io/hostname":        "testNode5",
+					"topology.kubernetes.io/zone":   "90003",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.3.1:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.3.2:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.4.1:11", NodeName: "testNode4"},
+				{Endpoint: "1.1.4.2:11", NodeName: "testNode4"},
+			},
+			currentNodeName: "testNode5",
+			topologyKeys:    []string{"kubernetes.io/hostname", "topology.kubernetes.io/zone"},
+			expected:        []endpoint{},
+		},
+		{
+			// Case[8]: 2 topology keys (hostname, "*"), 2 nodes each with 2
+			// endpoints, 1 match hostname = 2 endpoints
+			Name: "multiple topology keys matched node when 'Any' key ignored",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+			currentNodeName: "testNode1",
+			topologyKeys:    []string{"kubernetes.io/hostname", v1.TopologyKeyAny},
+			expected: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+			},
+		},
+		{
+			// Case[9]: 2 topology keys (hostname, "*"), 2 nodes each with 2
+			// endpoints, no hostname match, catch-all ("*") matched with 4
+			// endpoints
+			Name: "two topology keys matched node with 'Any' key",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode3": {
+					"kubernetes.io/hostname":        "testNode3",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+			currentNodeName: "testNode3",
+			topologyKeys:    []string{"kubernetes.io/hostname", v1.TopologyKeyAny},
+			expected: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+			},
+		},
+		{
+			// Case[10]: 3 topology keys (hostname, zone, "*"), 2 nodes in zone a,
+			// 2 nodes in zone b, each with 2 endpoints, no hostname match, no
+			// zone, catch-all ("*") matched with 8 endpoints
+			Name: "multiple topology keys matched node with 'Any' key",
+			nodeLabels: map[types.NodeName]map[string]string{
+				"testNode1": {
+					"kubernetes.io/hostname":        "testNode1",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode2": {
+					"kubernetes.io/hostname":        "testNode2",
+					"topology.kubernetes.io/zone":   "90001",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode3": {
+					"kubernetes.io/hostname":        "testNode3",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode4": {
+					"kubernetes.io/hostname":        "testNode4",
+					"topology.kubernetes.io/zone":   "90002",
+					"topology.kubernetes.io/region": "cd",
+				},
+				"testNode5": {
+					"kubernetes.io/hostname":        "testNode5",
+					"topology.kubernetes.io/zone":   "90003",
+					"topology.kubernetes.io/region": "cd",
+				},
+			},
+			endpoints: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.3.1:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.3.2:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.4.1:11", NodeName: "testNode4"},
+				{Endpoint: "1.1.4.2:11", NodeName: "testNode4"},
+			},
+			currentNodeName: "testNode5",
+			topologyKeys:    []string{"kubernetes.io/hostname", "topology.kubernetes.io/zone", v1.TopologyKeyAny},
+			expected: []endpoint{
+				{Endpoint: "1.1.1.1:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.1.2:11", NodeName: "testNode1"},
+				{Endpoint: "1.1.2.1:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.2.2:11", NodeName: "testNode2"},
+				{Endpoint: "1.1.3.1:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.3.2:11", NodeName: "testNode3"},
+				{Endpoint: "1.1.4.1:11", NodeName: "testNode4"},
+				{Endpoint: "1.1.4.2:11", NodeName: "testNode4"},
+			},
+		},
+	}
+	endpointsToStringArray := func(endpoints []endpoint) []string {
+		result := make([]string, 0, len(endpoints))
+		for _, ep := range endpoints {
+			result = append(result, ep.Endpoint)
+		}
+		return result
+	}
+	for _, tc := range testCases {
+		t.Run(tc.Name, func(t *testing.T) {
+			m := make(map[Endpoint]endpoint)
+			endpoints := []Endpoint{}
+			for _, ep := range tc.endpoints {
+				var e Endpoint = &BaseEndpointInfo{Endpoint: ep.Endpoint, Topology: tc.nodeLabels[ep.NodeName]}
+				m[e] = ep
+				endpoints = append(endpoints, e)
+			}
+			currentNodeLabels := tc.nodeLabels[tc.currentNodeName]
+			filteredEndpoint := []endpoint{}
+			for _, ep := range FilterTopologyEndpoint(currentNodeLabels, tc.topologyKeys, endpoints) {
+				filteredEndpoint = append(filteredEndpoint, m[ep])
+			}
+			if !reflect.DeepEqual(filteredEndpoint, tc.expected) {
+				t.Errorf("expected %v, got %v", endpointsToStringArray(tc.expected), endpointsToStringArray(filteredEndpoint))
+			}
+		})
+	}
+}

pkg/proxy/types.go

@@ -30,6 +30,7 @@ type Provider interface {
 	config.EndpointsHandler
 	config.EndpointSliceHandler
 	config.ServiceHandler
+	config.NodeHandler
 
 	// Sync immediately synchronizes the Provider's current state to proxy rules.
 	Sync()
@@ -77,6 +78,8 @@ type ServicePort interface {
 	NodePort() int
 	// GetOnlyNodeLocalEndpoints returns if a service has only node local endpoints
 	OnlyNodeLocalEndpoints() bool
+	// TopologyKeys returns service TopologyKeys as a string array.
+	TopologyKeys() []string
 }
 
 // Endpoint in an interface which abstracts information about an endpoint.
@@ -87,6 +90,8 @@ type Endpoint interface {
 	String() string
 	// GetIsLocal returns true if the endpoint is running in same host as kube-proxy, otherwise returns false.
 	GetIsLocal() bool
+	// GetTopology returns the topology information of the endpoint.
+	GetTopology() map[string]string
 	// IP returns IP part of the endpoint.
 	IP() string
 	// Port returns the Port part of the endpoint.

pkg/proxy/userspace/proxier.go

@@ -112,6 +112,8 @@ type asyncRunnerInterface interface {
 type Proxier struct {
 	// EndpointSlice support has not been added for this proxier yet.
 	config.NoopEndpointSliceHandler
+	// TODO(imroc): implement node handler for userspace proxier.
+	config.NoopNodeHandler
 
 	loadBalancer    LoadBalancer
 	mu              sync.Mutex // protects serviceMap

pkg/proxy/winkernel/proxier.go

@@ -444,6 +444,8 @@ func (em proxyEndpointsMap) unmerge(other proxyEndpointsMap, curServices proxySe
 type Proxier struct {
 	// EndpointSlice support has not been added for this proxier yet.
 	proxyconfig.NoopEndpointSliceHandler
+	// TODO(imroc): implement node handler for winkernel proxier.
+	proxyconfig.NoopNodeHandler
 
 	// endpointsChanges and serviceChanges contains all changes to endpoints and
 	// services that happened since policies were synced. For a single object,

pkg/proxy/winuserspace/proxier.go

@@ -83,6 +83,8 @@ func logTimeout(err error) bool {
 type Proxier struct {
 	// EndpointSlice support has not been added for this proxier yet.
 	config.NoopEndpointSliceHandler
+	// TODO(imroc): implement node handler for winuserspace proxier.
+	config.NoopNodeHandler
 
 	loadBalancer   LoadBalancer
 	mu             sync.Mutex // protects serviceMap