Shulou(Shulou.com)05/31 Report--

Editor to share with you what the Kube-proxy configuration parameters are, I believe most people do not know much about it, so share this article for your reference, I hope you can learn a lot after reading this article, let's go to know it!

Here are all the configurations for Kube-proxy version 1.12.0, of which the highlighted and bold is the Flag that I think you should pay attention to.

FlagComments--azure-container-registry-config contains the file path of Azure container registration configuration information-- bind-address default value: 0.0.0.0 IP address listened to by proxy service-- if cleanup is true, clear iptables and ipvs rules and exit-- cleanup-ipvs

In the case of true, make clear ipvs rules before kube-proxy runs.

The default value is ture

-- cluster-cidr

The CIDR range of the pod in the cluster. When configured, send from outside this range

Traffic to the service cluster IP will be camouflaged and sent from POD to external LoadBalance

IP traffic will be directed to their respective cluster IP

-- the path to the config configuration file-- how often config-sync-period updates the apiserver configuration. Must be greater than 0. Default value: 15m0s--conntrack-max-per-core

Maximum number of NAT connections to be tracked per CPU core. Default: 32768

(0 means keep the limit and ignore conntrack-min)

-- conntrack-min

The minimum number of conntrack entries assigned, regardless of conntrack-max-per-core

The default is 131072. (set conntrack-max-per-core=0 to keep the limit)

-- conntrack-tcp-timeout-close-wait

NAT timeout for closing TCP connections while waiting. Default: 1h0m0s

-- the idle timeout for conntrack-tcp-timeout-established to establish a TCP connection. The default value is a set of key-value pairs used by 24h0m0s--feature-gates to describe the functions of alpha/ experimental features. -healthz-bind-address is used to monitor the IP address and port of the inspection service. Default: 0.0.0.0:10256--healthz-port binds the port of the health check service. 0 means it is not available. Default: if 10256--hostname-override is not empty, it will use this value instead of the actual hostname as the identity-- iptables-masquerade-bit.

If a pure iptables proxy is used, a portion of the fwmark space is used to mark the package that requires SNAT

The range is 0: 31, and the default value is 14.

-- minimum interval for iptables-min-sync-period rule refresh when endpoints and services changes-- maximum interval for iptables-sync-periodiptables rule refresh, must be greater than 0, default value: CIDR list that 30s--ipvs-exclude-cidrs should not touch when cleaning ipvs rules (separated by commas)-- minimum interval for ipvs-min-sync-period rule refresh when endpoints and services changes-- ipvs-scheduler when proxy is in ipvs mode Ipvs scheduling type-the maximum interval between ipvs-sync-period durationipvs rule refreshes, which must be greater than 0. Default value: burst pulses of 30s--kube-api-burst interacting with kubernetes apiserver. Default is 10--kube-api-content-type.

The type of request text sent to apiserver. Default value:

"application/vnd.kubernetes.protobuf"

-- QPS where kube-api-qps interacts with kubernetes apiserver. Default is the path to the kubeconfig profile containing authentication information in 5--kubeconfig-- the maximum number of seconds between log-flush-frequency log refreshes. Default value: if 5s--masquerade-all uses a pure iptables proxy, SNAT all traffic sent through the service cluster ip-- the address of masterKubernetes api server (overriding any value in kubeconfig)-- the ip address and port of the metrics-bind-addressmetrics server service. Default value: 127.0.0.1:10249--nodeport-addresses

A string array that specifies the address used by NodePorts. The default null value indicates that you use the

All local addresses.

-- oom-score-adj

The oom-score- adjunct value of the kube-proxy process, which ranges from-1000 to 1000

Default value: 999

-- profiling, if set to true, is profiled through the web interface on the / debug/pprof handler. -- proxy-mode

Proxy mode used: 'userspace' (older) or' iptables' (faster) or

'ipvs' (experimental). If empty, use the best proxy (currently iptables)

If iptables is selected, but the kernel or iptables version of the system is not enough, it returns

To use the userspace proxy

-- range of proxy-port-range host ports (beginPort- endport, single port or beginPort+ offset), which can be used for proxy service traffic. If (not specified, 0, or 0-0) the port will be randomly selected. -- udp-timeout

Time for idle UDP connections to be held (e.g 250ms, 2s), must be greater than 0, and apply only to proxy mode

For userspace. Default value: 250ms

-- write-config-to if set, write the configuration values to this file and exit all the contents of the article "what are the Kube-proxy configuration parameters?" Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.