Skip to content

Commit de0ae96

Browse files
wiliefTimothy-Dougherty
authored andcommitted
added warning in Access Control for IP Address conversion CIDR bypass on NLB (kubernetes-sigs#2868)
1 parent ac5d974 commit de0ae96

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

docs/guide/service/annotations.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -415,6 +415,10 @@ Load balancer access can be controlled via following annotations:
415415
This annotation will be ignored in case preserve client IP is not enabled.
416416
- preserve client IP is disabled by default for `IP` targets
417417
- preserve client IP is enabled by default for `instance` targets
418+
419+
!!!warning ""
420+
Preserve client IP has no effect on traffic converted from IPv4 to IPv6 and on traffic converted from IPv6 to IPv4. The source IP of this type of traffic is always the private IP address of the Network Load Balancer.
421+
- This could cause the clients that have their traffic converted to bypass the specified CIDRs that are allowed to access the NLB.
418422

419423
!!!example
420424
```

0 commit comments

Comments
 (0)