Kubernetes Pod's service cannot reach via Pod'sIP

General Discussions
1

Hello, I am now encountering the following situation. I have expose the Kubernetes pod’s service by using the NodePort, which is mapping the owf-svc port - 8081 to host port 30016. However, there are some problem in getting the repose packet.

Node port setting
owf-svc NodePort 10.233.44.11 8081:30016/TCP 6h34m

**ipvsadm setting
TCP 169.254.25.10:30016 rr
-> 10.233.97.137:8081 Masq 1 0 0
TCP 172.17.0.1:30016 rr
-> 10.233.97.137:8081 Masq 1 0 0
TCP 172.20.47.64:30016 rr
-> 10.233.97.137:8081 Masq 1 0 0
TCP 172.20.57.202:30016 rr
-> 10.233.97.137:8081 Masq 1 0 0
TCP 172.20.84.168:30016 rr
-> 10.233.97.137:8081 Masq 1 0 0
TCP 10.233.95.0:30016 rr
-> 10.233.97.137:8081 Masq 1 0 0
TCP 127.0.0.1:30016 rr
-> 10.233.97.137:8081 Masq 1 0 0
**

Expected Behavior

The IP addresses of whole cluster member is able to access to the service end point.

Current Behavior

Only certain Nodes is able to get the HTTP content of the service end point.

Failed to access

fail
fail718×55 2.06 KB

Steps to Reproduce (for bugs)

  1. Set the server and client in different nodes
  2. Try to access the server via “curl” command
  3. client timeout occurred

Your Environment

  • Calico version v1.15.3
  • Orchestrator version (e.g. kubernetes, mesos, rkt): Kubernetes v1.15.3
  • Docker version (client) 18.09.5
  • Docker version (engine) 19.03.1
  • Operating System and version: RHEL 7.6
  • Link to your project (optional):

##attachment - client and server packet trace
I have also attached the network capture for both client and server side in github (https://github.com/projectcalico/calico/issues/2997)
Server side:
[#23] server receives the HTTP get request
[#35] server response the HTTP get result

Client side:
#16701 Client side sent out the HTTP get request
#16719 Client side receive the HTTP continuation packet