<p><a href="https://i.stack.imgur.com/SOtjT.png" rel="nofollow noreferrer">1 Master : 10.166.232.164
2 Worker : 10.166.232.165, 10.166.232.166</a></p>
<p><a href="https://i.stack.imgur.com/OWqHJ.png" rel="nofollow noreferrer">Deploy 3 replica pods for 2 worker nodes</a></p>
<p><a href="https://i.stack.imgur.com/ORX0j.png" rel="nofollow noreferrer">Nodeport service</a></p>
<p>problem is i can access by curl podIP:8080</p>
<p>but</p>
<p>exec pod and access by clusterIP:Nodeport is not working</p>
<p>kubectl exec -it network-example2-84c98c7b4d-d7wnr /bin/bash -- curl 10.98.10.159:8080
=&gt; curl: (7) Failed to connect to 10.98.10.159 port 8080: Connection refused</p>
<p>kubectl exec -it network-example2-84c98c7b4d-d7wnr /bin/bash -- curl 10.98.10.159:23060
=&gt; no answer(maybe timeout error)</p>
<p>is it firewall problem..? or CNI..?</p>
<p>I'm using weave-net and no change any config</p>

YoungDo Park
<p>A closer look to your screenshot indicate you have set <code>externalTrafficPolicy</code> to <code>Local</code>. Try:</p>
<p><code>curl 10.166.232.165:32060 or curl 10.166.232.166:32060</code></p>
<p>&quot;Local&quot; means only the node which has the pod running will response to you, otherwise your request will be drop. Change to &quot;Cluster&quot; if you wish all the nodes will response to you regardless if it has the pod running.</p>
