Is it possible to restrict kubernetes dns resolution to return instance on same node as pod?Linux Virtual Server: NAT return pathAccess Docker port from host's hostIntermittent DNS failures in Google Container Enginekube-dns fails open /var/run/secrets/kubernetes.io/serviceaccount/token: no such file or directoryRouting traffic through OpenVPN on Kubernetes with CalicoKubernetes Pod DNS ResolutionGoogle Cloud VPC Alias IP Routing Across ZonesIn Kubernetes, how can a container created from a CronJob find out when it was scheduled?Virtual Kubelet: node selection on scale-out and scale-inHow to encrypt or route through other interface kube-proxy service traffic?
What is GPS' 19 year rollover and does it present a cybersecurity issue?
Calculate Levenshtein distance between two strings in Python
What is the offset in a seaplane's hull?
Latin words with no plurals in English
Can I legally use front facing blue light in the UK?
Is it possible to make sharp wind that can cut stuff from afar?
Imbalanced dataset binary classification
Is every set a filtered colimit of finite sets?
How can I add custom success page
What is the command to reset a PC without deleting any files
Sort in WP_Query(), not filter? Is it possible?
Is it true that "The augmented fourth (A4) and the diminished fifth (d5) are the only aug and dim intervals that appear in diatonic scales"
What kind of transistor turns on with 0.2 volts?
OA final episode explanation
How to create a consistant feel for character names in a fantasy setting?
How do you conduct xenoanthropology after first contact?
What does "enim et" mean?
Check if two datetimes are between two others
How to deal with fear of taking dependencies
When blogging recipes, how can I support both readers who want the narrative/journey and ones who want the printer-friendly recipe?
Is there a familial term for apples and pears?
Add an angle to a sphere
Extreme, but not acceptable situation and I can't start the work tomorrow morning
How to manage monthly salary
Is it possible to restrict kubernetes dns resolution to return instance on same node as pod?
Linux Virtual Server: NAT return pathAccess Docker port from host's hostIntermittent DNS failures in Google Container Enginekube-dns fails open /var/run/secrets/kubernetes.io/serviceaccount/token: no such file or directoryRouting traffic through OpenVPN on Kubernetes with CalicoKubernetes Pod DNS ResolutionGoogle Cloud VPC Alias IP Routing Across ZonesIn Kubernetes, how can a container created from a CronJob find out when it was scheduled?Virtual Kubelet: node selection on scale-out and scale-inHow to encrypt or route through other interface kube-proxy service traffic?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I have a setup where we're running telegraf and the pod is configured as a daemon set in rancher (so instance per node.) Now when doing nslookup over the alias in any container, dns resolution returns all ips of all instances on all nodes. Is it possible to restrict this to just the node the workload is running on?
Reason to ask is that in some containers, there is a udp socket send_to, which for some reason seems to resolve all ips and then attempt to connect to all of them before writing the data.
kubernetes
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I have a setup where we're running telegraf and the pod is configured as a daemon set in rancher (so instance per node.) Now when doing nslookup over the alias in any container, dns resolution returns all ips of all instances on all nodes. Is it possible to restrict this to just the node the workload is running on?
Reason to ask is that in some containers, there is a udp socket send_to, which for some reason seems to resolve all ips and then attempt to connect to all of them before writing the data.
kubernetes
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
I have a setup where we're running telegraf and the pod is configured as a daemon set in rancher (so instance per node.) Now when doing nslookup over the alias in any container, dns resolution returns all ips of all instances on all nodes. Is it possible to restrict this to just the node the workload is running on?
Reason to ask is that in some containers, there is a udp socket send_to, which for some reason seems to resolve all ips and then attempt to connect to all of them before writing the data.
kubernetes
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I have a setup where we're running telegraf and the pod is configured as a daemon set in rancher (so instance per node.) Now when doing nslookup over the alias in any container, dns resolution returns all ips of all instances on all nodes. Is it possible to restrict this to just the node the workload is running on?
Reason to ask is that in some containers, there is a udp socket send_to, which for some reason seems to resolve all ips and then attempt to connect to all of them before writing the data.
kubernetes
kubernetes
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 4 at 21:08
NimNim
1012
1012
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Nim is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Nim is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f961589%2fis-it-possible-to-restrict-kubernetes-dns-resolution-to-return-instance-on-same%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Nim is a new contributor. Be nice, and check out our Code of Conduct.
Nim is a new contributor. Be nice, and check out our Code of Conduct.
Nim is a new contributor. Be nice, and check out our Code of Conduct.
Nim is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f961589%2fis-it-possible-to-restrict-kubernetes-dns-resolution-to-return-instance-on-same%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown