colossal-television-75726
03/30/2023, 3:12 PMrough-farmer-49135
03/30/2023, 3:55 PMcolossal-television-75726
03/30/2023, 4:31 PMabc
ip -d link show flannel.1
5: flannel.1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1370 qdisc noqueue state UNKNOWN mode DEFAULT group default
link/ether aa:bb:cc:dd:ee:ff brd ff:ff:ff:ff:ff:ff promiscuity 0 minmtu 68 maxmtu 65535
vxlan id 1 local 10.0.0.1 dev abc srcport 0 0 dstport 8472 nolearning ttl auto ageing 300 udpcsum noudp6zerocsumtx noudp6zerocsumrx addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535
But flannel listens to 0.0.0.0
netstat -tulpn
udp 0 0 0.0.0.0:8472 0.0.0.0:* -
Maybe I'm missing somethingrough-farmer-49135
03/30/2023, 4:56 PMroute -n
and you'll notice a route to each kubernetes node with the flannel interface. Why it shows up as all in netstat, I'm not sure.colossal-television-75726
03/30/2023, 5:39 PMnetstat -tulpn
isn't showing me the PID and the state, so there is no state LISTEN
on 8472
, but netstat
lists it.
I run wireguard on the machine, and the wireguard port is listed the same way (no state, no PID) and is open.
This is why I'm concernedrough-farmer-49135
03/30/2023, 5:56 PMcolossal-television-75726
03/30/2023, 5:57 PMflannel.1
shows me 8472
Tearing down the RKE2 cluster results in the port getting closed.creamy-pencil-82913
03/30/2023, 6:22 PMcolossal-television-75726
03/30/2023, 6:48 PM