https://github.com/openshift/ose/pull/1218
Tested on build v3.9.27 The dns query on a non-egress-node pod will not be transferred to the egress node. Steps: 1. Setup env with network policy plugin 2. Patch any of the node as egress node 3. Create project and pods in it 4. Patch project with egress IP in step 2 5. tcpdump on port 53 on all the nodes 6. Try to send a dns query to the local dns server from the pod which is landed on the non-egress-node 7. There is no packet generated on the egress node
(In reply to Meng Bo from comment #5) > 6. Try to send a dns query to the local dns server from the pod which is > landed on the non-egress-node > 7. There is no packet generated on the egress node (And the DNS query in step 6 should succeed.)
(In reply to Dan Winship from comment #6) > (In reply to Meng Bo from comment #5) > > 6. Try to send a dns query to the local dns server from the pod which is > > landed on the non-egress-node > > 7. There is no packet generated on the egress node > > (And the DNS query in step 6 should succeed.) Aha, yeah, thanks. It succeeded indeed.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1566