• 1 Post
  • 9 Comments
Joined 1 year ago
cake
Cake day: January 13th, 2024

help-circle


  • To get nginx ingress to use the external clients IP, you can configure the ingress controllers traffic policy. Using the helm chart, I used these values:

    controller:
              service:
                # this has a bunch of downsides, but allows source-ip based access white/deny listing.
                externalTrafficPolicy: Local
    

    For the ingress IP, I configured metal-lb to receive traffic on a static IP (using IP4AddressPool and L2Advertisement CRDs from metal-lb), which is then used for the port forwarding. I’ve never tested it because I only have a single worker node, but I expect the metal-lb controller will continue receiving traffic to that same static IP if a node goes down.





  • To be honest, it’s still a little hectic for me, but I feel the most notable change is that you can avoid being countered / masterstriked. By positioning your weapon, you can block, perfect block (allows you to strike back) or masterstrike which remains unblockable. There is now an interesting back and forth between blocking, striking back and being blocked, which can go on forever - until someone has no stamina left or someone pulls off a masterstrike.