mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-11-01 06:10:17 +00:00
- `GOARM` should not be hardcoded - `GOARM` needn't be set when the `ARCH` is not `arm` - make it also possible to build binary within `agnhost` dir as well - fix image build failure when the user is root Signed-off-by: Dave Chen <dave.chen@arm.com>
Reproduction of k8s issue #74839
Network services with heavy load will cause "connection reset" from time to time. Especially those with big payloads. When packets with sequence number out-of-window arrived k8s node, conntrack marked them as INVALID. kube-proxy will ignore them, without rewriting DNAT. The packet goes back the the original pod, who doesn't recognize the packet because of the wrong source ip, end up RSTing the connection.