Can I have LoadBalancer IPs and Egress IPs be the same?
CrimsonFez opened this issue · comments
Hello, I'm evaluating solutions for assigning one IP to my pods for ingress and egress.
My specific solution needs to provide LoadBalancer IPs for services while also re-using the LB IP to egress pods using that service, all while being highly available. In this case, the pod is initiating a connection outgoing, the system needs to be able to handle routing return traffic back to the pod.
Would I be able to setup EgressGateway to support this?
Additionally, does EgressGateway support Calico in eBPF mode?
Thanks in advance!
Hello, I'm evaluating solutions for assigning one IP to my pods for ingress and egress. My specific solution needs to provide LoadBalancer IPs for services while also re-using the LB IP to egress pods using that service, all while being highly available. In this case, the pod is initiating a connection outgoing, the system needs to be able to handle routing return traffic back to the pod.
Would I be able to setup EgressGateway to support this?
Additionally, does EgressGateway support Calico in eBPF mode?
Thanks in advance!
If your Pod is the one initiating the connection, you can use EgressGateway. (EgressGateway only translates the traffic actively initiated by the Pod into the VIP.)
If your Pod is the one receiving the connection, you can use metallb.
EgressGateway can operate concurrently with metallb, but they cannot share the same VIP because metallb and EgressGateway may respond to the VIP from different nodes (ARP mode).
As for whether EgressGateway supports Calico in eBPF mode, I haven't tested it. I will reply after conducting a test.
Due to the lack of feedback for a long time, this issue will be temporarily closed. Please reopen it if there are any problems.