title: Kubernetes kube-proxy mechanism
body: <p>In Kubernetes, let’s say we have three pods, which are physically hosted on Node X, Y and Z. When I expose them as a service using ‘kubectl expose’, are all nodes in the cluster (in addition to X, Y and Z) configured the same way? Specifically, kube-proxy in each node within the cluster watches the apiserver, builds a bunch of iptables rules and references the portal IP (chosen by apiserver), and inserts those rules to the node which it lives on?</p>
  
  <p>I assume the reason it has to be done on all nodes is that the cluster has no idea from which node the client would come from to hit the portal IP?</p>