<repo_name>akitekt/k8s-network-blog<file_sep>/trunks-iptables.cs
root@ip-101-202-7-202:/home/pie# iptables -L -t nat | grep -B 1 -A 4 -E 'KUBE-SVC-3C2I2DNJ4VWZY5PF|KUBE-SEP-P6JNEFEXMECE2WS6|KUBE-SEP-DX25GZBAXCASAQMI|KUBE-SEP-HI43CU4ZL6YUQHDB'

KUBE-MARK-MASQ  tcp  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */ tcp dpt:30998
KUBE-SVC-3C2I2DNJ4VWZY5PF  tcp  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */ tcp dpt:30998
--

Chain KUBE-SEP-DX25GZBAXCASAQMI (1 references)
target     prot opt source               destination
KUBE-MARK-MASQ  all  --  ip-10-0-11-27.ec2.internal  anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */
DNAT       tcp  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */ tcp to:10.0.11.27:80

--

Chain KUBE-SEP-HI43CU4ZL6YUQHDB (1 references)
target     prot opt source               destination
KUBE-MARK-MASQ  all  --  ip-10-0-35-21.ec2.internal  anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */
DNAT       tcp  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */ tcp to:10.0.35.21:80

--

Chain KUBE-SEP-P6JNEFEXMECE2WS6 (1 references)
target     prot opt source               destination
KUBE-MARK-MASQ  all  --  ip-10-0-11-26.ec2.internal  anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */
DNAT       tcp  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */ tcp to:10.0.11.26:80

--
KUBE-MARK-MASQ  tcp  -- !ip-10-0-0-0.ec2.internal/16  ip-10-1-60-159.ec2.internal  /* performanceks1/performanceks1-external-ingress-controller:https cluster IP */ tcp dpt:https
KUBE-SVC-3C2I2DNJ4VWZY5PF  tcp  --  anywhere             ip-10-1-60-159.ec2.internal  /* performanceks1/performanceks1-external-ingress-controller:https cluster IP */ tcp dpt:https
--

Chain KUBE-SVC-3C2I2DNJ4VWZY5PF (2 references)
target     prot opt source               destination
KUBE-SEP-P6JNEFEXMECE2WS6  all  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */ statistic mode random probability 0.33332999982
KUBE-SEP-DX25GZBAXCASAQMI  all  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */ statistic mode random probability 0.50000000000
KUBE-SEP-HI43CU4ZL6YUQHDB  all  --  anywhere             anywhere             /* performanceks1/performanceks1-external-ingress-controller:https */
<file_sep>/trunks-ip-route.cs
10.0.183.0/24 dev kube-bridge  proto kernel  scope link  src 10.0.183.1
10.0.184.0/24 via 172.16.58.3 dev eth0  proto 17
10.0.185.0/24 via 192.168.3.11 dev eth0  proto 17
10.0.186.0/24 via 192.168.127.12 dev eth0  proto 17
10.0.188.0/24 via 172.16.58.3 dev eth0  proto 17
10.0.195.0/24 dev tun-102050124  proto 17  src 172.16.31.10
10.0.196.0/24 dev tun-102051237  proto 17  src 172.16.31.10
10.0.230.0/24 dev tun-1020514194  proto 17  src 172.16.31.10
10.0.231.0/24 dev tun-1020514171  proto 17  src 172.16.31.10
<file_sep>/gogeta-ip-route.cs
default via 192.168.3.11 dev eth0
10.0.0.0/24 via 192.168.3.11 dev tunl0  proto bird onlink
10.0.1.0/24 via 172.16.58.3 dev tunl0  proto bird onlink
10.0.2.0/24 via 192.168.3.11 dev eth0  proto bird
10.0.3.0/24 via 172.16.58.3 dev tunl0  proto bird onlink
10.0.4.0/24 via 172.16.31.10 dev tunl0  proto bird onlink
10.0.5.0/24 via 172.16.31.10 dev eth0  proto bird
10.0.6.0/24 via 172.16.17.32 dev tunl0  proto bird onlink
blackhole 10.0.7.0/24  proto bird
10.0.7.2 dev cali77ec83574f4  scope link
10.0.7.3 dev cali09a12e605e2  scope link
10.0.7.4 dev calid9fe6681678  scope link
10.0.7.5 dev cali00eb81c9259  scope link
10.0.7.8 dev calia645991a7fb  scope link
10.0.7.9 dev cali8e98e4eb396  scope link
10.0.7.11 dev cali15c7619fccc  scope link
10.0.7.12 dev calid75abf4f5e0  scope link
192.168.127.12/23 dev eth0  proto kernel  scope link  src 172.16.31.10
172.17.0.0/16 dev docker0  proto kernel  scope link  src 172.17.0.1 linkdown

<file_sep>/vegata-ip-route.cs
10.0.100.0/24 via 192.168.127.12 dev tunl0  proto bird onlink
10.0.101.0/24 via 172.16.58.3 dev tunl0  proto bird onlink
10.0.102.0/24 via 172.16.58.3 dev tunl0  proto bird onlink
10.0.103.0/24 via 192.168.3.11 dev tunl0  proto bird onlink
blackhole 10.0.104.0/24  proto bird
10.0.104.2 dev calibeec4c34496  scope link
10.0.104.7 dev calia08627eee93  scope link
10.0.104.8 dev cali7f75471adc7  scope link
10.0.104.9 dev cali9066bf87c18  scope link
10.0.104.36 dev calibb5dd9f41de  scope link
10.0.104.43 dev calicf6bd8e667d  scope link
10.0.104.44 dev califfcbcf93207  scope link
10.0.104.50 dev caliaa698084a1f  scope link
10.0.104.53 dev calib424fcbd49c  scope link
10.0.105.0/24 via 192.168.127.12 dev tunl0  proto bird onlink
10.0.106.0/24 via 192.168.127.12 dev tunl0  proto bird onlink
10.0.107.0/24 via 172.16.58.346 dev tunl0  proto bird onlink
10.0.108.0/24 via 172.16.58.3 dev tunl0  proto bird onlink
10.0.109.0/24 via 172.16.58.3 dev tunl0  proto bird onlink
10.0.110.0/24 via 172.16.31.10 dev tunl0  proto bird onlink
172.16.31.10/23 dev eth0  proto kernel  scope link  src 172.16.31.10
172.17.0.0/16 dev docker0  proto kernel  scope link  src 172.17.0.1 linkdown







<file_sep>/vegeta-crictl-inspectp.cs
root@ip-101-202-5-39:/home/pie# crictl pods
POD ID              CREATED             STATE               NAME                                                              NAMESPACE           ATTEMPT
843aae920308e       2 weeks ago         Ready               splunk-universal-forwarder-mhqxk                                  kube-system         0
3c825484d2734       2 weeks ago         Ready               jaeger-agent-2x26m                                                jaeger              0
6a4731b67a62c       2 weeks ago         Ready               kube2iam-6wkjc                                                    kube-system         0
15fd1a68b837d       2 weeks ago         Ready               calico-node-j8nf9                                                 kube-system         0
254a9cc452cfd       2 weeks ago         Ready               kube-proxy-cshd9                                                  kube-system         0


root@ip-101-202-5-39:/home/pie# crictl inspectp 3c825484d2734
{
  "status": {
    "id": "3c825484d2734e4fe1c54f2ecdc9d34bb54e4330ab48c9426fc90fdd02d2335d",
    "metadata": {
      "attempt": 0,
      "name": "jaeger-agent-2x26m",
      "namespace": "jaeger",
      "uid": "6dc97082-095c-11e9-a5bc-0258965a256c"
    },
    "state": "SANDBOX_READY",
    "createdAt": "2018-12-26T22:20:50.673959575Z",
    "network": {
      "ip": "10.0.104.2"
    },
    "linux": {
      "namespaces": {
        "options": {
          "ipc": "POD",
          "network": "POD",
          "pid": "CONTAINER"
        }
      }
    },
    "labels": {
      "app": "jaeger",
      "component": "agent",
      "controller-revision-hash": "957477944",
      "io.kubernetes.pod.name": "jaeger-agent-2x26m",
      "io.kubernetes.pod.namespace": "jaeger",
      "io.kubernetes.pod.uid": "6dc97082-095c-11e9-a5bc-0258965a256c",
      "jaeger-infra": "agent-instance",
      "pod-template-generation": "1",
      "release": "jaeger"
    },
    "annotations": {
      "kubernetes.io/config.seen": "2018-12-26T22:20:18.48411321Z",
      "kubernetes.io/config.source": "api"
    }
  }
}