# Is it possible to use kubernetes with net.ipv4.ip\_forward=0

**URL:** <https://discuss.kubernetes.io/t/is-it-possible-to-use-kubernetes-with-net-ipv4-ip-forward-0/25661>\
**Category:** General Discussions\
**Tags:** network\
**Created:** [October 9, 2023, 3:55am UTC](https://discuss.kubernetes.io/t/is-it-possible-to-use-kubernetes-with-net-ipv4-ip-forward-0/25661 "2023-10-09T03:55:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![a-h-abid](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/a-h-abid/32/13426_2.png) [@a-h-abid](https://discuss.kubernetes.io/u/a-h-abid)\
**Post date:** [October 9, 2023, 3:55am UTC](https://discuss.kubernetes.io/t/is-it-possible-to-use-kubernetes-with-net-ipv4-ip-forward-0/25661/1 "2023-10-09T03:55:42Z")

</div>

### Cluster information:

Kubernetes version: 1.17.4  
Cloud being used: bare-metal  
Installation method: KubeAdm, \w Docker 19.03, Calico-CNI, Istio 1.5.4  
Host OS: RHEL 7.9  
CNI and version: calico  
CRI and version: ?

Just have a simple question.

Is it possible to use kubernetes by using setting `net.ipv4.ip_forward=0`? Our security team considers enabling IPV4 forwarding a security vulnerability.

Would be glad if answered.

---

<div class="post-metadata">

**Author:** ![thockin](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/thockin/32/2457_2.png) [@thockin](https://discuss.kubernetes.io/u/thockin)\
**Post date:** [October 9, 2023, 2:30pm UTC](https://discuss.kubernetes.io/t/is-it-possible-to-use-kubernetes-with-net-ipv4-ip-forward-0/25661/2 "2023-10-09T14:30:01Z")

</div>

That’s an unusual assertion.

There may be some implementation of k8s networking that doesn’t need it, but I have not heard of one.

Fundamentally, every pod gets an IP, which makes every node a sort of router.