From 9971fc3dacadae1a898a54da68ee69597381117c Mon Sep 17 00:00:00 2001 From: Bryan Boreham Date: Thu, 29 Aug 2019 16:24:07 +0000 Subject: [PATCH] =?UTF-8?q?=C3=82Add=20a=20note=20about=20incompatibility?= =?UTF-8?q?=20with=20iptables=201.8?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- site/kubernetes/kube-addon.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/site/kubernetes/kube-addon.md b/site/kubernetes/kube-addon.md index e0b48597..08be3bf3 100644 --- a/site/kubernetes/kube-addon.md +++ b/site/kubernetes/kube-addon.md @@ -339,6 +339,8 @@ UDP connection from 10.32.0.7:56648 to 10.32.0.11:80 blocked by Weave NPC. ### Things to watch out for +- Weave Net does not work on hosts running iptables 1.8 or above, only with 1.6. + Track this via issue [#3465](https://github.com/weaveworks/weave/issues/3465) - Don't turn on `--masquerade-all` on kube-proxy: this will change the source address of every pod-to-pod conversation which will make it impossible to correctly enforce network policies that restrict which