A reason for unexplained connection timeouts on Kubernetes/Docker

AbstractThe Linux Kernel has a known race condition when doing source network address translation (SNAT) that can lead to SYN packets being dropped. SNAT is performed by default on outgoing connections with Docker and Flannel using iptables masquerading rules. The race can happen when multiple containers try to establish new connections to the same external address concurrently. In some cases, two

[yassan0627]

A reason for unexplained connection timeouts on Kubernetes/Docker

[toenobu]

“retransmission”