You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| Session affinity | Ensures that connections from a particular client are passed to the same Pod each time. | Windows Server 2022 | Set `service.spec.sessionAffinity` to "ClientIP" |
118
-
| Direct Server Return (DSR) | Load balancing mode where the IP address fixups and the LBNAT occurs at the container vSwitch port directly; service traffic arrives with the source IP set as the originating pod IP. | Windows Server 2019 | Set the following flags in kube-proxy: `--feature-gates="WinDSR=true" --enable-dsr=true`|
118
+
| Direct Server Return (DSR) |{{< feature-state for_k8s_version="v1.33" state="beta" >}} Load balancing mode where the IP address fixups and the LBNAT occurs at the container vSwitch port directly; service traffic arrives with the source IP set as the originating pod IP. | Windows Server 2019 | Set the following flags in kube-proxy: `--feature-gates="WinDSR=true" --enable-dsr=true`|
119
119
| Preserve-Destination | Skips DNAT of service traffic, thereby preserving the virtual IP of the target service in packets reaching the backend Pod. Also disables node-node forwarding. | Windows Server, version 1903 | Set `"preserve-destination": "true"` in service annotations and enable DSR in kube-proxy. |
120
120
| IPv4/IPv6 dual-stack networking | Native IPv4-to-IPv4 in parallel with IPv6-to-IPv6 communications to, from, and within a cluster | Windows Server 2019 | See [IPv4/IPv6 dual-stack](/docs/concepts/services-networking/dual-stack/#windows-support)|
121
121
| Client IP preservation | Ensures that source IP of incoming ingress traffic gets preserved. Also disables node-node forwarding. | Windows Server 2019 | Set `service.spec.externalTrafficPolicy` to "Local" and enable DSR in kube-proxy |
122
122
{{< /table >}}
123
123
124
-
{{< warning >}}
125
-
There are known issue with NodePort Services on overlay networking, if the destination node is running Windows Server 2022.
126
-
To avoid the issue entirely, you can configure the service with `externalTrafficPolicy: Local`.
127
-
128
-
There are known issues with Pod to Pod connectivity on l2bridge network on Windows Server 2022 with KB5005619 or higher installed.
129
-
To workaround the issue and restore Pod to Pod connectivity, you can disable the WinDSR feature in kube-proxy.
130
-
131
-
These issues require OS fixes.
132
-
Please follow https://github.com/microsoft/Windows-Containers/issues/204 for updates.
133
-
{{< /warning >}}
134
-
135
124
## Limitations
136
125
137
126
The following networking functionality is _not_ supported on Windows nodes:
0 commit comments