# Kube-proxy over l3 network / k3s

**URL:** <https://discuss.kubernetes.io/t/kube-proxy-over-l3-network-k3s/20783>\
**Category:** General Discussions\
**Created:** [July 28, 2022, 12:26pm UTC](https://discuss.kubernetes.io/t/kube-proxy-over-l3-network-k3s/20783 "2022-07-28T12:26:20Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![N\_N](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/n_n/32/10529_2.png) [@N\_N](https://discuss.kubernetes.io/u/N_N)\
**Post date:** [July 28, 2022, 12:26pm UTC](https://discuss.kubernetes.io/t/kube-proxy-over-l3-network-k3s/20783/1 "2022-07-28T12:26:20Z")

</div>

Hello! I have test environment with two servers over l3 network (bird). For server communication I have dummy interface (modprobe dummy). After setup k3s I have problem with firewall, for example:

- nc -v \<kubernetes\_api\_svc\> 443
- We have two node, thats two endpoint for ClusterIP svc inside default namespace, when request go to current server, working ok
- When request go to other server MASQUERADE use ip address of phisical interface, but other side want src ip of dummy interface.

Why kube-proxy not have parameter for use SNAT --to-source instead of MASQUERADE?  
This is looks like a problem with my approach. Where is true way to setup kubernetes inside l3 network on bare metal?

---

<div class="post-metadata">

**Author:** ![thockin](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/thockin/32/2457_2.png) [@thockin](https://discuss.kubernetes.io/u/thockin)\
**Post date:** [July 28, 2022, 3:15pm UTC](https://discuss.kubernetes.io/t/kube-proxy-over-l3-network-k3s/20783/2 "2022-07-28T15:15:04Z")

</div>

Why is it masquerading between nodes at all? It should not need to. I don’t know what k3s is doing for setup, but pod-pod should not need NAT

---

<div class="post-metadata">

**Author:** ![odgrand12](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/odgrand12/32/10626_2.png) [@odgrand12](https://discuss.kubernetes.io/u/odgrand12)\
**Post date:** [August 13, 2022, 8:49am UTC](https://discuss.kubernetes.io/t/kube-proxy-over-l3-network-k3s/20783/3 "2022-08-13T08:49:33Z")

</div>

I have the same problem. I , did you way to solve it? I use k8s.

---

<div class="post-metadata">

**Author:** ![m.shalenko](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/m.shalenko/32/15605_2.png) [@m.shalenko](https://discuss.kubernetes.io/u/m.shalenko)\
**Post date:** [August 16, 2024, 1:51pm UTC](https://discuss.kubernetes.io/t/kube-proxy-over-l3-network-k3s/20783/4 "2024-08-16T13:51:52Z")

</div>

it looks like I have the same problem. Any ideas?