Andy Tan

you have 2 different things : 1/ you need to activate proxy protocol on ingress + lb (to support proxy protocol) 2/ you need to use externalTrafficPolicy local (to be...

really, i always needed to setup externaltrafficpolicy to local to get the real ip of the user. you may be lucky https://blog.getambassador.io/externaltrafficpolicy-local-on-kubernetes-e66e498212f9 https://www.asykim.com/blog/deep-dive-into-kubernetes-external-traffic-policies

interesting, im not using DO. it could be useful to understand the reason. Maybe the difference between OVH & DO lbs

https://docs.digitalocean.com/products/kubernetes/how-to/configure-load-balancers/#proxy-protocol >External Traffic Policies and Health Checks Load balancers managed by DOKS assess the health of the endpoints for the LoadBalancer service that provisioned them. >A health check’s behavior is...

you may need to customize healthcheck ? ``` metadata: name: health-check-snippet annotations: service.beta.kubernetes.io/do-loadbalancer-healthcheck-port: "80" service.beta.kubernetes.io/do-loadbalancer-healthcheck-protocol: "http" service.beta.kubernetes.io/do-loadbalancer-healthcheck-path: "/health" service.beta.kubernetes.io/do-loadbalancer-healthcheck-check-interval-seconds: "3" service.beta.kubernetes.io/do-loadbalancer-healthcheck-response-timeout-seconds: "5" service.beta.kubernetes.io/do-loadbalancer-healthcheck-unhealthy-threshold: "3" service.beta.kubernetes.io/do-loadbalancer-healthcheck-healthy-threshold: "5" ```

you can mitigate the traffic spread using pod anti affinity btw, its not perfect but its not that bad

i dont see why using DaemonSet will resolve it ?

ok,i was talking about the fact of not using externaltrafficpolicy local but cluster. i dont know about the daemonset, you could test im only using defaut chart currently that works...

i dont get your point . why are you trying to use forwarded headers ? are you trying to replace proxyprotocol by x forwaded for ? >The thing is that...

nginx + traefik support both forwarded headers + proxy protocol