Hello. I am having trouble getting k3s + multus to pass traffic. i have modified the multis-daemonset deployment and the pods come up with IP addresses on the secondary network. traffic seems to be hitting the bridge that is created, but traffic doesn’t seem to get to the other pod. is there a system setting i am missing. i feel like it must be something obvious, but not sure what

what is your secondary CNI plugin?

flannel. what we noticed is that the iptables FORWARD chain has a default policy of DROP. If we changes this default policy to ACCEPT then things started working. now sure how/why the default policy was DROP or if multus should have modified this on deploy.

Multus does not modify anything in the CNI plugin configuration. It is just a multiplexer that tricks Kubernetes into thinking that there is only one CNI plugin, even though there are more than one