kubernetes iptable
- 作者: 向進之
- 来源: 51数据库
- 2020-10-03
Firewall就是iptables进化的，系统版本不同防火墙的命令就不同。
你用centos7以下，ubuntu14以下，都是iptables，，以后的版本就用firewall了。
你可以不关闭防火墙，只需要开启这些端口就行了 master节点 6443* kubernetes api server 2379-2380 etcd server client api 10250 kubelet api 10251 kube-scheduler 10252 kube-controller-manager 10255 read-only kubelet api (heapster) worker节点 10250 kubelet api 10255 read-only kubelet api (heapster) 30000-32767 default port range for nodeport services. typically, these ports would need to be exposed to external load-balancers, or other external consumers of the application itself.
你用centos7以下，ubuntu14以下，都是iptables，，以后的版本就用firewall了。
你可以不关闭防火墙，只需要开启这些端口就行了 master节点 6443* kubernetes api server 2379-2380 etcd server client api 10250 kubelet api 10251 kube-scheduler 10252 kube-controller-manager 10255 read-only kubelet api (heapster) worker节点 10250 kubelet api 10255 read-only kubelet api (heapster) 30000-32767 default port range for nodeport services. typically, these ports would need to be exposed to external load-balancers, or other external consumers of the application itself.
推荐阅读
