k8s: forwarding from public VIP to clusterIP with iptables

Question

I\'m trying to understand in depth how forwarding from publicly exposed load-balancer\'s layer-2 VIPs to services\' cluster-IPs works. I\'ve read a high-level overview how M

Answer 1

need to add MASQUERADE rule also, so that the source is changed accordingly. for example:
iptables -t nat -A POSTROUTING -j MASQUERADE

tested with ipvs