Skip to content

Commit 37384f2

Browse files
committed
Added hostnetwork to the ways to get traffic in
We covered a bunch of ways to get traffic in to your pods, but I realized we ommitted hostnetwork. This fixes that ommission.
1 parent dbb6d36 commit 37384f2

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

dev_guide/getting_traffic_into_cluster.adoc

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -397,6 +397,25 @@ down, the virtual IP address is automatically transferred to another host in the
397397
pool.
398398

399399

400+
[[host-network]]
401+
== Using Host Networking
402+
403+
You can choose to let the pods use the networking of the host that
404+
they are on rather than containerizing the networking and using
405+
the SDN. This is how the router works, and it can be a useful
406+
technique when you have to proxy a Layer 7 protocol that is not
407+
http/https/or TLS with SNI. You can look at the way the router is
408+
configured to see how to set it up, but basically you need to set
409+
`hostNetwork: true` in the pod definition, and then run the router
410+
with a service account that has the `hostnetwork` permission. You can
411+
grant the permission with `oc adm policy add-scc-to-user hostnetwork
412+
system:serviceaccount:default:someserviceaccountname`.
413+
414+
Once configured, the pod can access all of the network interfaces on
415+
the node that it is running on, including the host's SDN interface.
416+
This allows you to make your own proxy, or allows you to run a program
417+
directly on the host interfaces directly.
418+
400419
[[ingress-load-balancer]]
401420
== Non-Cloud Edge Router Load Balancer
402421

0 commit comments

Comments
 (0)