<p>I got the ingress nginx working in <code>gcloud</code>. However, when I see the log with the command <code>kubectl log</code> </p>

<pre><code>$ kubectl logs nginx-ingress-controller-59f55c679c-zcr24
myhost.com/clients"
10.28.0.1 - [10.28.0.1] - - [14/May/2018:09:00:59 +0000] "GET /api/users/2/10 HTTP/1.1" 304 0 "http://myhost.com/clients" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 796 0.083 [default-back-main-80] 10.28.0.93:1337 0 0.083 304
2018/05/14 09:01:00 [notice] 10982#10982: *6937489 "/api/(.*)" matches "/api/users/1/10", client: 10.28.0.1, server: myhost.com, request: "GET /api/users/1/10 HTTP/1.1", host: "myhost.com", referrer: "http://myhost.com/clients"
2018/05/14 09:01:00 [notice] 10982#10982: *6937489 rewritten data: "/users/1/10", args: "", client: 10.28.0.1, server: myhost.com, request: "GET /api/users/1/10 HTTP/1.1", host: "myhost.com", referrer: "http://myhost.com/clients"
10.28.0.1 - [10.28.0.1] - - [14/May/2018:09:01:00 +0000] "GET /api/users/1/10 HTTP/1.1" 304 0 "http://myhost.com/clients" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0" 796 0.014 [default-back-main-80] 10.28.0.93:1337 0 0.014 304
</code></pre>

<p>This is only one part of the  logs, however, all the ips are coming from <code>10.28.0.1</code>. I would like to see the external ip, or my users' ips.</p>

<p>Furthermore, the root of the ip <code>10.28.*.*</code> seems a bit weird to me. If I display the ip of my containers, you can see that it seems different.</p>

<pre><code>$ kubectl get service | awk '{print $3}'
CLUSTER-IP
10.31.243.114
10.31.245.58
10.31.241.148
10.31.240.1
</code></pre>

<p>I understand that the request in my other containers comes from a private ip, however in the ingress container I should receive the external ips of my users. How can I see these ips?</p>

silgon
<p>It looks like <a href="https://kubernetes.io/docs/tutorials/services/source-ip/" rel="nofollow noreferrer">source IP</a> (in your case, External IP) must be preserved while using the GKE service. Here, the default is set to use cluster IP, which means that traffic will go through SNAT and get transferred from node to node. During this time, the ‘Source IP' (External IP) get replaced with the node’s IP(a detailed explanation is provided in <a href="https://kubernetes.io/docs/tutorials/services/source-ip/#source-ip-for-services-with-type-nodeport" rel="nofollow noreferrer">this</a> help center article).</p>

<p>As per the <a href="https://kubernetes.io/docs/tutorials/services/source-ip/#source-ip-for-services-with-type-nodeport" rel="nofollow noreferrer">article</a>, by setting ‘<strong><a href="https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip" rel="nofollow noreferrer">service.spec.externalTrafficPolicy</a></strong>’ to the value ‘<strong>Local</strong>’ which will bypass the SNAT and you might be able to route traffic directly to the correct node/pod thus preserving the source IP.</p>

<p>The command for setting this <strong>exernalTrafficPolicy</strong> for a service might look like this:-</p>

<pre><code>$kubectl patch svc [service_name] -p '{"spec":{"externalTrafficPolicy":"Local"}'
</code></pre>

<p>In your case, service_name=nginx-ingress-controller-59f55c679c-zcr24</p>
