Ping a Service IP: nothing. curl it: it works. How?
You'll learn to
explain the service CIDR and that a Service IP lives on no machine
Recap
- 1Service IPs come from their own range (10.96.0.0/12 on kubeadm)
- 2A ClusterIP is virtual: kube-proxy DNATs it on every node
- 3Modes: iptables (default), nftables, IPVS (deprecated)
Check yourself
On which machine does a Service's ClusterIP live?
8.9
Stamp this lesson
Watched it and passed the check? Mark it in your logbook.