Study. uk . com
  1. Home
  2. All questions
  3. Question 730

CKA study material · question 730 of 1000

A very large cluster in iptables mode sees kube-proxy take a long time to converge after a change. What is the underlying cause?

  1. kube-proxy resynchronises only once per minute in that mode
  2. iptables rules are written per Service and per endpoint, so the rule set grows very large
  3. Each Service requires its own network namespace
  4. iptables mode reloads the whole rule set from the API server each time
Show the answer

Answer: B. iptables rules are written per Service and per endpoint, so the rule set grows very large

In iptables mode kube-proxy creates rules for every Service and every endpoint address, so tens of thousands of endpoints leave it slow to update the whole set.

Source: Virtual IPs and Service Proxies (Kubernetes) — Proxy modes › iptables proxy mode › Optimizing iptables mode performance

Challenge yourself on this topic → Study as cards