我已经在openstack上安装了kubernetes。该设置在 coreos 上有一个主节点和一个节点。
我有一个在 UDP 端口 5060 上托管 SIP 应用程序的 pod，并且我已创建服务为NODEPORT在 5060 上。
规格：
"spec": {
"ports": [
{
"port": 5061,
"protocol": "UDP",
"targetPort": 5060,
"nodeport": 5060,
"name": "sipu"
}
],
"selector": {
"app": "opensips"
},
"type": "NodePort"
}
IPs
- 节点公网IP：192.168.144.29.
- 节点私有IP：10.0.1.215。.
- 容器的IP：10.244.2.4.
- docker0接口：10.244.2.1.
现在，问题来了。
我向应用程序发送 SIP 请求并期望得到 200 OK 响应，但我没有得到该响应。
为了跟踪相同的情况，我在容器和节点上安装了 TCPDUMP。
在容器上，我可以看到捕获的请求和响应数据包，而在节点本身上我只能看到请求数据包。不明白为什么数据包会丢失。
下面是容器的tcpdump：
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 1514 bytes
06:12:20.391171 IP (tos 0x0, ttl 64, id 13372, offset 0, flags [DF], proto UDP (17), length 1010)
10.244.2.1.50867 > 10.244.2.4.5060: [bad udp cksum 0x1ddc -> 0xe738!] SIP, length: 982
PUBLISH sip:[email protected] /cdn-cgi/l/email-protection SIP/2.0
Via: SIP/2.0/UDP 192.168.144.10:5060;branch=z9hG4bK-5672-1-0
Max-Forwards: 20
From: service <sip:[email protected] /cdn-cgi/l/email-protection>;tag=1
To: sut <sip:[email protected] /cdn-cgi/l/email-protection>
Call-ID: [email protected] /cdn-cgi/l/email-protection
CSeq: 1 PUBLISH
Expires: 3600
Event: presence
Content-Length: 607
User-Agent: Sipp v1.1-TLS, version 20061124
<?xml version="1.0"?>
<deleted presence xml to reduce size>
06:12:20.401126 IP (tos 0x10, ttl 64, id 11888, offset 0, flags [DF], proto UDP (17), length 427)
10.244.2.4.5060 > 10.244.2.1.5060: [bad udp cksum 0x1b95 -> 0xeddc!] SIP, length: 399
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.144.10:5060;received=10.244.2.1;branch=z9hG4bK-5672-1-0
From: service <sip:[email protected] /cdn-cgi/l/email-protection>;tag=1
To: sut <sip:[email protected] /cdn-cgi/l/email-protection>;tag=332ff20b76febdd3c55f313f3efc6bb8-ca08
Call-ID: [email protected] /cdn-cgi/l/email-protection
CSeq: 1 PUBLISH
Expires: 3600
SIP-ETag: a.1450478491.39.2.0
Server: OpenSIPS (1.8.4-notls (x86_64/linux))
Content-Length: 0
06:12:20.401364 IP (tos 0x0, ttl 64, id 13374, offset 0, flags [DF], proto UDP (17), length 427)
10.244.2.1.58836 > 10.244.2.4.5060: [bad udp cksum 0x1b95 -> 0x1bcc!] SIP, length: 399
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.144.10:5060;received=10.244.2.1;branch=z9hG4bK-5672-1-0
From: service <sip:[email protected] /cdn-cgi/l/email-protection>;tag=1
To: sut <sip:[email protected] /cdn-cgi/l/email-protection>;tag=332ff20b76febdd3c55f313f3efc6bb8-ca08
Call-ID: [email protected] /cdn-cgi/l/email-protection
CSeq: 1 PUBLISH
Expires: 3600
SIP-ETag: a.1450478491.39.2.0
Server: OpenSIPS (1.8.4-notls (x86_64/linux))
Content-Length: 0
以及节点的 tcpdump：
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 1514 bytes
06:12:20.390772 IP (tos 0x0, ttl 127, id 20196, offset 0, flags [none], proto UDP (17), length 1010)
192.168.144.10.5060 > 10.0.1.215.5060: [udp sum ok] SIP, length: 982
PUBLISH sip:[email protected] /cdn-cgi/l/email-protection SIP/2.0
Via: SIP/2.0/UDP 192.168.144.10:5060;branch=z9hG4bK-5672-1-0
Max-Forwards: 20
From: service <sip:[email protected] /cdn-cgi/l/email-protection>;tag=1
To: sut <sip:[email protected] /cdn-cgi/l/email-protection>
Call-ID: [email protected] /cdn-cgi/l/email-protection
CSeq: 1 PUBLISH
Expires: 3600
Event: presence
Content-Length: 607
User-Agent: Sipp v1.1-TLS, version 20061124
<?xml version="1.0"?>
<presence xmlns="urn:ietf:params:xml:ns:pidf" />
来自 Iptables 的 Nodeport 规则
Chain KUBE-NODEPORT-CONTAINER (1 references)
pkts bytes target prot opt in out source destination
12 8622 REDIRECT udp -- * * 0.0.0.0/0 0.0.0.0/0 /* default/opensips:sipu */ udp dpt:5060 redir ports 40482
3 95 REDIRECT udp -- * * 0.0.0.0/0 0.0.0.0/0 /* default/my-udp-service: */ udp dpt:6000 redir ports 47497
Chain KUBE-NODEPORT-HOST (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 /* default/opensips:sipu */ udp dpt:5060 to:10.0.1.215:40482
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 /* default/my-udp-service: */ udp dpt:6000 to:10.0.1.215:47497
如果需要，我很乐意分享更多信息。我试图以我的能力进行挖掘，但现在我不知道该看什么，因此在这里请求一些帮助。
EDIT
我做了同样的测试TCP。在 TCP 上，它按预期工作。
Thanks
