bind cilium的Host-Reachable 技术，利 用eBPF程序，拦截应用在内核connect 、 sendmsg、 recvmsg 、getpeername 、 bind等系统调用，实现 service 的地址解 析，并且伪装通信目的地址，让上层应用 无感知 DNAT 的发生 效果： • 集群内访问nodePort、LoadBalancer 的service时，能够减少数据包转发跳

the public terminal can properly act as a client to the door service. We can test this by running a Python gRPC client for the door service that exists in the terminal-87 container. We’ll invoke the ‘cc_door_client’ the door-id): $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetName Door name is: Spaceport Door #1 $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetLocat Door override the security and help the rebels escape. To see this, run: $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py SetAcce Successfully set AccessCode to 999 Securing Access to a gRPC

the public terminal can properly act as a client to the door service. We can test this by running a Python gRPC client for the door service that exists in the terminal-87 container. We’ll invoke the ‘cc_door_client’ door-id): $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetName 1 Door name is: Spaceport Door #1 $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetLocation override the security and help the rebels escape. To see this, run: $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py SetAccessCode 1 999 Successfully set AccessCode to 999 Securing Access

the public terminal can properly act as a client to the door service. We can test this by running a Python gRPC client for the door service that exists in the terminal-87 container. We’ll invoke the ‘cc_door_client’ door-id): $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetName 1 Door name is: Spaceport Door #1 $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetLocation override the security and help the rebels escape. To see this, run: $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py SetAccessCode 1 999 Successfully set AccessCode to 999 Securing Access

the public terminal can properly act as a client to the door service. We can test this by running a Python gRPC client for the door service that exists in the terminal-87 container. We’ll invoke the ‘cc_door_client’ door-id): $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetName 1 Door name is: Spaceport Door #1 $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetLocation override the security and help the rebels escape. To see this, run: $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py SetAccessCode 1 999 Successfully set AccessCode to 999 Securing Access

the public terminal can properly act as a client to the door service. We can test this by running a Python gRPC client for the door service that exists in the terminal-87 container. We’ll invoke the ‘cc_door_client’ door-id): $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetName 1 Door name is: Spaceport Door #1 $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetLocation override the security and help the rebels escape. To see this, run: $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py SetAccessCode 1 999 Successfully set AccessCode to 999 Securing Access

the public terminal can properly act as a client to the door service. We can test this by running a Python gRPC client for the door service that exists in the terminal-87 container. We’ll invoke the ‘cc_door_client’ door-id): $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetName 1 Door name is: Spaceport Door #1 $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetLocation override the security and help the rebels escape. To see this, run: $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py SetAccessCode 1 999 Successfully set AccessCode to 999 Securing Access

the public terminal can properly act as a client to the door service. We can test this by running a Python gRPC client for the door service that exists in the terminal-87 container. We’ll invoke the ‘cc_door_client’ door-id): $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetName 1 Door name is: Spaceport Door #1 $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py GetLocation override the security and help the rebels escape. To see this, run: $ kubectl exec terminal-87 -- python3 /cloudcity/cc_door_client.py SetAccessCode 1 999 Successfully set AccessCode to 999 Securing Access