{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/22698","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/22698/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/22698/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/22698/events","html_url":"https://github.com/kubernetes/kubernetes/issues/22698","id":139322653,"number":22698,"title":"Using iptables kube-proxy, additional IP address routed over second interface doesn't route anywhere.","user":{"login":"maclof","id":4358583,"avatar_url":"https://avatars.githubusercontent.com/u/4358583?v=3","gravatar_id":"","url":"https://api.github.com/users/maclof","html_url":"https://github.com/maclof","followers_url":"https://api.github.com/users/maclof/followers","following_url":"https://api.github.com/users/maclof/following{/other_user}","gists_url":"https://api.github.com/users/maclof/gists{/gist_id}","starred_url":"https://api.github.com/users/maclof/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/maclof/subscriptions","organizations_url":"https://api.github.com/users/maclof/orgs","repos_url":"https://api.github.com/users/maclof/repos","events_url":"https://api.github.com/users/maclof/events{/privacy}","received_events_url":"https://api.github.com/users/maclof/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/priority/P2","name":"priority/P2","color":"fbca04"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/cluster","name":"team/cluster","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":30,"created_at":"2016-03-08T16:25:53Z","updated_at":"2016-04-20T06:41:15Z","closed_at":null,"body":"I have a second NIC card in my servers, which are capable of having public IPs routed over them so that I can do failover with Keepalived, etc.\r\n\r\nI am using version v1.2.0-alpha.3 / v1.2.0-alpha.7.\r\n\r\nThe IP address in question is 164.132.217.81 and is setup using these commands:\r\n```\r\nip addr add 164.132.217.81/28 dev cbr0\r\nip route add default via 164.132.217.94 dev cbr0 table 125\r\nip rule add from 164.132.217.80/28 table 125\r\n```\r\n\r\nThe iptables rules that it has added for this IP address are:\r\n```\r\n-A KUBE-SERVICES -d 164.132.217.81/32 -p tcp -m comment --comment \"default/test: external IP\" -m tcp --dport 80 -j KUBE-MARK-MASQ\r\n-A KUBE-SERVICES -d 164.132.217.81/32 -p tcp -m comment --comment \"default/test: external IP\" -m tcp --dport 80 -m physdev ! --physdev-is-in -m addrtype ! --src-type LOCAL -j KUBE-SVC-35S3EZIG46QF2FDR\r\n-A KUBE-SERVICES -d 164.132.217.81/32 -p tcp -m comment --comment \"default/test: external IP\" -m tcp --dport 80 -m addrtype --dst-type LOCAL -j KUBE-SVC-35S3EZIG46QF2FDR\r\n```\r\n\r\nWhen accessing this IP on port 80 with curl, it will just hang and eventually timeout.\r\n\r\nThis article seems to be a similar issue, although not sure if this affects how the kube-proxy would work: http://williamsbdev.com/posts/docker-connection-marking\r\n\r\nAny help would be appreciated!\r\n\r\n/cc @thockin "},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/212282405","html_url":"https://github.com/kubernetes/kubernetes/issues/22698#issuecomment-212282405","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/22698","id":212282405,"user":{"login":"maclof","id":4358583,"avatar_url":"https://avatars.githubusercontent.com/u/4358583?v=3","gravatar_id":"","url":"https://api.github.com/users/maclof","html_url":"https://github.com/maclof","followers_url":"https://api.github.com/users/maclof/followers","following_url":"https://api.github.com/users/maclof/following{/other_user}","gists_url":"https://api.github.com/users/maclof/gists{/gist_id}","starred_url":"https://api.github.com/users/maclof/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/maclof/subscriptions","organizations_url":"https://api.github.com/users/maclof/orgs","repos_url":"https://api.github.com/users/maclof/repos","events_url":"https://api.github.com/users/maclof/events{/privacy}","received_events_url":"https://api.github.com/users/maclof/received_events","type":"User","site_admin":false},"created_at":"2016-04-20T06:41:15Z","updated_at":"2016-04-20T06:41:15Z","body":"hey @thockin I have sent the email to you, so hopefully you have received it. I appreciate any help you can give me :)"}}