pod-to-a-l3-denied-cnp-64c6c75c5d-xmqhw 1/1 Running 0 4m50s pod-to-b-intra-node-845f955cdc-5nfrt 1/1 Running 0 4m49s pod-to-b-multi-node-clusterip-666594b445-bsn4j pod-to-a-l3-denied-cnp-64c6c75c5d-xmqhw 1/1 Running 0 4m50s pod-to-b-intra-node-845f955cdc-5nfrt 1/1 Running 0 4m49s pod-to-b-multi-node-clusterip-666594b445-bsn4j pod-to-a-l3-denied-cnp-64c6c75c5d-xmqhw 1/1 Running 0 4m50s pod-to-b-intra-node-845f955cdc-5nfrt 1/1 Running 0 4m49s pod-to-b-multi-node-clusterip-666594b445-bsn4j

hubble-relay-5684848cc8-6ldhj 0/1 ContainerCreating 0 2s hubble-ui-54c6bc4cdc-h5drq 0/1 Pending 0 2s kube-apiserver-kind-control-plane 22m hubble-relay-5684848cc8-2z6qk 1/1 Running 0 21s hubble-ui-54c6bc4cdc-g5mgd 1/1 Running 0 17s kube-apiserver-kind-control-plane

hubble-relay-5684848cc8-6ldhj 0/1 ContainerCreating 0 2s hubble-ui-54c6bc4cdc-h5drq 0/1 Pending 0 2s kube-apiserver-kind-control-plane 22m hubble-relay-5684848cc8-2z6qk 1/1 Running 0 21s hubble-ui-54c6bc4cdc-g5mgd 1/1 Running 0 17s kube-apiserver-kind-control-plane

return）实现，有效减 少了网络转发的跳数，极大提升了 nodePort的转发性能，降低访问延时。 相关测试表明： • kube proxy iptables模式下，请求完 成时间 1.6ms ，connect 时间 0.9 ms • Cilium DSR模式下，请求完成时间 1ms，connect时间0.4ms node2 pod2 process kernel network stack