https://kukie.tech/tags/conntrack/Recent content in Conntrack on HistoryHugoko-krFri, 16 Oct 2026 21:00:00 +0900https://kukie.tech/posts/network-k8s-02-2/Fri, 16 Oct 2026 21:00:00 +0900https://kukie.tech/posts/network-k8s-02-2/What the Linux kernel does to a packet between the door and the socket, measured on an Ubuntu VM — counting the five Netfilter hooks, reading one conntrack entry and its state changes, DNAT to a Service-like address with kube-proxy’s random rule, MASQUERADE out of a namespace, a node as a router, an external SYN meeting 0.0.0.0 vs 127.0.0.1, and where eBPF plugs in.https://kukie.tech/wiki/conntrack/Mon, 01 Jan 0001 00:00:00 +0000https://kukie.tech/wiki/conntrack/Netfilter 자리에 걸린 함수 둘과 해시 테이블 하나로 연결을 5-tuple 로 기억하는 커널 모듈. 방화벽의 ESTABLISHED 판정과 NAT 의 답장 되돌리기가 이 테이블 위에서 성립한다.