title: Kubernetes Service Proxy Concept: PublicIP
body: <p>I am trying to launch Guestbook.go example from kubernetes doc as follows:</p>
  
  <p><a href="https://github.com/GoogleCloudPlatform/kubernetes/tree/master/examples/guestbook-go" rel="nofollow">https://github.com/GoogleCloudPlatform/kubernetes/tree/master/examples/guestbook-go</a></p>
  
  <p>I have modified the guestbook-service.json in the  above link to include PublicIPs </p>
  
  <pre><code>{
    "apiVersion": "v1beta1",
    "kind": "Service",
    "id": "guestbook",
    "port": 3000, 
    "containerPort": "http-server",
    "publicIPs": ["10.39.67.97","10.39.66.113"],
    "selector": { "name": "guestbook" }
  }
  </code></pre>
  
  <p>I have one master and two minions as shown below:</p>
  
  <pre><code>centos-minion -&gt; 10.39.67.97
  centos-minion2 -&gt; 10.39.66.113
  </code></pre>
  
  <p>I am using my publicIPs as my minions eth0 IP. But the iptables get created only on one of the minions:</p>
  
  <pre><code>[root@ip-10-39-67-97 ~]# iptables -L -n -t nat
  Chain KUBE-PORTALS-HOST (1 references)
  target     prot opt source               destination         
  DNAT       tcp  --  0.0.0.0/0            10.254.208.93        /* redis-slave      */ tcp dpt:6379 to:10.39.67.240:56872
  DNAT       tcp  --  0.0.0.0/0            10.254.223.192       /* guestbook */ tcp dpt:3000 to:10.39.67.240:58746
  DNAT       tcp  --  0.0.0.0/0            10.39.67.97          /* guestbook */ tcp dpt:3000 to:10.39.67.240:58746
  DNAT       tcp  --  0.0.0.0/0            10.39.66.113         /* guestbook */ tcp dpt:3000 to:10.39.67.240:58746
  DNAT       tcp  --  0.0.0.0/0            10.254.0.2           /* kubernetes */ tcp dpt:443 to:10.39.67.240:33003
  DNAT       tcp  --  0.0.0.0/0            10.254.0.1           /* kubernetes-ro */ tcp dpt:80 to:10.39.67.240:58434
  DNAT       tcp  --  0.0.0.0/0            10.254.131.70        /* redis-master */ tcp dpt:6379 to:10.39.67.240:50754
  </code></pre>
  
  <p>So even if i redundancy with my Pods if i bring down the minion with that IPTABLE my external publicIP entry point dies.. I am sure i have conceptual misunderstanding.. Can anyone help</p>