IP masking, or IP masquerading, rewrites Pod source addresses so traffic appears to originate from producer node addresses. In an Anthos GKE producer/consumer topology, it provides an alternative when consumer resources already use the producer Pod address range. section 10.2.2
Use the networking option that matches address-space ownership:
- With nonoverlapping privately used public IP (PUPI) ranges, export producer Pod routes across VPC peering and import them into the consumer VPC. section 10.2.2
- When the consumer VPC already uses the PUPI range, enable IP masquerading to hide Pod addresses behind producer node addresses. section 10.2.2
Producer-to-consumer communication
A producer Pod must initiate communication with a resource in vpc-consumer, but the consumer already uses the Pod range. Configure IP masquerading so the resource sees the producer node address instead of the Pod address. section 10.2.2
