Symptom:
We see intermittent the network issues in OKE (Oracle Kubernetes Engine). ingress controller pods have difficult to access other services. We use curl to test the network port, we get an error like below:
$ curl -v telnet://10.244.97.24:9090
* Expire in 0 ms for 6 (transfer 0x560b9cdd7dd0)
* Trying 10.244.97.24...
* TCP_NODELAY set
* Expire in 200 ms for 4 (transfer 0x560b9cdd7dd0)
* connect to 10.244.97.24 port 9090 failed: No route to host
Solution:
There are quite a few reasons for that. Check my another blog
In this case, it is related to firewall ports open.
By default, the network team open all ingress and egress ports for the same worker nodes Subnet which means no firewall among all worker nodes. However, it was set stateful. As Kubernetes overly network heavily depends on UDP which is stateless, so we need to open ports as stateless.
No comments:
Post a Comment