Disable ICMP Redirects
Closed this issue · 0 comments
spjmurray commented
ICMP packets ingress through eth0 and then egress (ESP encapsulated) though eth0. Given Linux isn't clever enough to see an XFRM has occurred on the packet, or that Kubernetes doesn't support multi-homing we need to disable these redirect packets from being generated. The kubernetes documentation suggests we can actually set this (via net.ipv4.conf.all.send_redirects), but at present it's half baked and doesn't allow this behavior easily.