{"action":"opened","issue":{"url":"https://api.github.com/repos/projectcalico/calico-cni/issues/193","repository_url":"https://api.github.com/repos/projectcalico/calico-cni","labels_url":"https://api.github.com/repos/projectcalico/calico-cni/issues/193/labels{/name}","comments_url":"https://api.github.com/repos/projectcalico/calico-cni/issues/193/comments","events_url":"https://api.github.com/repos/projectcalico/calico-cni/issues/193/events","html_url":"https://github.com/projectcalico/calico-cni/issues/193","id":184753881,"number":193,"title":"Can not access external websites from pods on kubernetes/calico","user":{"login":"linuxerwang","id":3304478,"avatar_url":"https://avatars.githubusercontent.com/u/3304478?v=3","gravatar_id":"","url":"https://api.github.com/users/linuxerwang","html_url":"https://github.com/linuxerwang","followers_url":"https://api.github.com/users/linuxerwang/followers","following_url":"https://api.github.com/users/linuxerwang/following{/other_user}","gists_url":"https://api.github.com/users/linuxerwang/gists{/gist_id}","starred_url":"https://api.github.com/users/linuxerwang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/linuxerwang/subscriptions","organizations_url":"https://api.github.com/users/linuxerwang/orgs","repos_url":"https://api.github.com/users/linuxerwang/repos","events_url":"https://api.github.com/users/linuxerwang/events{/privacy}","received_events_url":"https://api.github.com/users/linuxerwang/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-10-24T05:45:24Z","updated_at":"2016-10-24T05:45:24Z","closed_at":null,"body":"Hi, all\r\n\r\nI set up a cluster following http://kubernetes.io/docs/getting-started-guides/ubuntu-calico/. Most of the functionality of Kubernetes works well (pods get IPs correctly, pods can communicate with other pods, DNS works fine, DNS resolving works fine.), the only problem is that it can not connect to outside websites from pods. From within pods, it can ping host nodes correctly, but ping to machines in the same network but not in k8s cluster hangs forever.\r\n\r\nThe versions I am using:\r\n\r\nUbuntu: 16.04.1\r\nk8s: 1.3.6\r\ncalico-node: 0.22.0\r\ncalico-cni: 1.4.2\r\ncni plugin (loopback): 0.3.0\r\n\r\ncalicoctl status shows the correct node-to-node mesh addrs. Outside of k8s, nodes can ping other nodes and machines not in k8s cluster.\r\n\r\nThe route table in pod:\r\n\r\n# route -n\r\nKernel IP routing table\r\nDestination     Gateway         Genmask         Flags Metric Ref    Use Iface\r\n0.0.0.0         169.254.1.1     0.0.0.0         UG    0      0        0 eth0\r\n169.254.1.1     0.0.0.0         255.255.255.255 UH    0      0        0 eth0\r\n\r\n# cat /etc/resolv.conf \r\nsearch default.svc.cluster.local svc.cluster.local cluster.local\r\nnameserver 10.10.0.10 # <--- 10.10.0.10 is the dns cluster IP I set.\r\noptions ndots:5\r\n\r\nMy pod IP range is 172.10.0.0/16, and all pods' IPs are correctly assigned. I am not sure about the 169.254.1.1 in route table, but pods can talk to other pods (172.10.0.0/16) without problem. Communicating through service IP is also ok.  But any ping to machines out of k8s or public domains will just hang forever.\r\n\r\nWhere should I debug from? I can provide more details if needed.\r\n\r\nThanks!"}}
{"actor":{"display_login":"linuxerwang"}}