Welcome to terway Discussions!

[l1b0k]

👋 Welcome!

We’re using Discussions as a place to connect with other members of our community. We hope that you:

• Ask questions you’re wondering about.
• Share ideas.
• Engage with other community members.
• Welcome others and are open-minded. Remember that this is a community we
  build together 💪.
• Join DingTalk group by DingTalkGroup id "35924643".

To get started, comment below with an introduction of yourself and tell us about what you do with this community.

[cyclinder]

HI all👋

我使用cilium 模式，所有 Pod 正常running, 但发现 节点无法跨节点与 pod通信，但 Pod 跨节点是正常的

[root@iZ2vc5zub002vrlwursb4rZ ~]# kubectl get po -o wide
NAME                    READY   STATUS    RESTARTS   AGE   IP               NODE                                NOMINATED NODE   READINESS GATES
test-77877f4755-n5jkw   1/1     Running   0          34m   192.168.20.223   cn-chengdu.i-2vc5zub002vrlwursb4s   <none>           <none>
test-77877f4755-pcxpk   1/1     Running   0          26m   192.168.20.235   cn-chengdu.i-2vc5zub002vrlwursb4r   <none>           <none>
[root@iZ2vc5zub002vrlwursb4rZ ~]# ping -c1 192.168.20.235
PING 192.168.20.235 (192.168.20.235) 56(84) bytes of data.
64 bytes from 192.168.20.235: icmp_seq=1 ttl=64 time=0.079 ms

--- 192.168.20.235 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.079/0.079/0.079/0.000 ms
[root@iZ2vc5zub002vrlwursb4rZ ~]# ping -c1 192.168.20.223
PING 192.168.20.223 (192.168.20.223) 56(84) bytes of data.
From 192.168.20.222 icmp_seq=1 Destination Host Unreachable

--- 192.168.20.223 ping statistics ---
1 packets transmitted, 0 received, +1 errors, 100% packet loss, time 0ms

[root@iZ2vc5zub002vrlwursb4rZ ~]# kubectl  exec test-77877f4755-n5jkw -- ping -c1 192.168.20.235
PING 192.168.20.235 (192.168.20.235) 56(84) bytes of data.
64 bytes from 192.168.20.235: icmp_seq=1 ttl=64 time=0.304 ms

--- 192.168.20.235 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.304/0.304/0.304/0.000 ms

ps: 使用仓库terway-cilium.yaml， policy container 无法启动，需要添加在启动命令中加入:

      - command:
        - "/bin/sh"
        - "-c"
        - |
              cilium preflight register-crd
              /bin/policyinit.sh

Thanks

[l1b0k]

[root@iZ2vc5zub002vrlwursb4rZ ~]# ping -c1 192.168.20.223
PING 192.168.20.223 (192.168.20.223) 56(84) bytes of data.
From 192.168.20.222 icmp_seq=1 Destination Host Unreachable

这个是 ECS -ECS 的访问吗？ 这个路径在启用 terway 前是否是通的

[cyclinder]

谢谢回复。

这个是 ECS 访问跨节点的 Pod时不通，ECS访问同节点 Pod 是正常的。另外 Pod 本地跨节点访问也是正常的。

[cyclinder]

另外测试下来，LB也是不通的

root@iZ2vc5zub002vrlwursb4rZ cyclinder]# kubectl  get svc ipvlan -o wide
NAME     TYPE           CLUSTER-IP    EXTERNAL-IP     PORT(S)        AGE     SELECTOR
ipvlan   LoadBalancer   172.21.0.98   47.109.64.156   80:30096/TCP   6m26s   app=ipvlan
cyclinder  ~  ♥ 11:35  curl 47.109.64.156
curl: (7) Failed to connect to 47.109.64.156 port 80: Connection refused