studio/sbbb
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ingress): use 10.0.0.0/8 bypass for all cluster-internal traffic

Browse Source 
Pod IPs are in 10.0.0.0/24, not 10.42.0.0/16 as assumed. Broadening
to 10.0.0.0/8 covers pods, services, and CNI overlays.
This commit is contained in:
Sienna Meridian Satterwhite
2026-03-09 08:00:46 +00:00
parent a101ea4b06
commit caefb071a8
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
base/ingress/pingora-config.yaml
View File

@@ -67,7 +67,7 @@ data:
enabled = true enabled = true
eviction_interval_secs = 300 eviction_interval_secs = 300
stale_after_secs = 600 stale_after_secs = 600
bypass_cidrs = ["10.42.0.0/16", "127.0.0.0/8", "::1/128"] bypass_cidrs = ["10.0.0.0/8", "127.0.0.0/8", "::1/128"]
[rate_limit.authenticated] [rate_limit.authenticated]
burst = 200 burst = 200