<p>I'm setting up a Kubernetes engine (cluster-version: "1.11") on GCP with Kubeflow installation script that deploy on "default" network and I setting up a Google VPN Service to on-premise network (10.198.96.0/20)</p>

<p>I try to connect from VMs or Kubernetes nodes from GCP to on-premise network all is fine but from Pods it cant't connect to op-premise network</p>

<ul>
<li>From GKE nodes or other VMs on "default" network (10.140.0.0/20) it can be ping or curl to on-premise hosts</li>
<li>From GKE Pods it can't ping or curl to on-premise hosts</li>
</ul>

<p>I'm looking up network configuration of pods creation is 10.24.0.0/14 and I thinks a CIDR of Pods not overlap with "default" network on GCP (10.140.0.0/20) and On-primise network (10.198.96.0/20)</p>

<p>Why Pods can't connect?</p>

Teerapat KHUNPECH
<p>After googling about IP MASQUERADE and I'm try from this <a href="https://blog.mrtrustor.net/post/iptables-kubernetes/" rel="nofollow noreferrer">post</a> and It's work!!!</p>
