From 22ecf505e3862d2f2fc885c00be14ae234abaf82 Mon Sep 17 00:00:00 2001 From: Bryan Boreham Date: Wed, 2 May 2018 06:06:58 +0100 Subject: [PATCH] Added note about security implications of enabling IP forwarding --- site/kubernetes/kube-addon.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/site/kubernetes/kube-addon.md b/site/kubernetes/kube-addon.md index 2442e8c9..e6319400 100644 --- a/site/kubernetes/kube-addon.md +++ b/site/kubernetes/kube-addon.md @@ -306,7 +306,8 @@ UDP connection from 10.32.0.7:56648 to 10.32.0.11:80 blocked by Weave NPC. - IP forwarding must be enabled on each node, in order for pods to access Kubernetes services or other IP addresses on another network. Check this with `sysctl net.ipv4.ip_forward`; the result - should be `1`. + should be `1`. (Be aware that there can be security implications of + enabling IP forwarding) ## Changing Configuration Options