mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-19 09:52:49 +00:00
|
||
---|---|---|
.. | ||
.gitignore | ||
BASEIMAGE | ||
Dockerfile | ||
main.go | ||
Makefile | ||
OWNERS | ||
README.md | ||
tcp_test.go | ||
tcp.go | ||
VERSION |
Reproduction of k8s issue #74839
Network services with heavy load will cause "connection reset" from time to time. Especially those with big payloads. When packets with sequence number out-of-window arrived k8s node, conntrack marked them as INVALID. kube-proxy will ignore them, without rewriting DNAT. The packet goes back the original pod, who doesn't recognize the packet because of the wrong source ip, end up RSTing the connection.