title: Add an nftables-based kube-proxy backend
kep-number: 3866
authors:
  - "@danwinship"
owning-sig: sig-network
status: implemented
creation-date: 2023-02-01
reviewers:
  - "@thockin"
  - "@dcbw"
  - "@aojea"
approvers:
  - "@thockin"

# The target maturity stage in the current dev cycle for this KEP.
stage: stable

# The most recent milestone for which work toward delivery of this KEP has been
# done. This can be the current (upcoming) milestone, if it is being actively
# worked on.
latest-milestone: "v1.33"

# The milestone at which this feature was, or is targeted to be, at each stage.
milestone:
  alpha: "v1.29"
  beta: "v1.31"
  stable: "v1.33"

# The following PRR answers are required at alpha release
# List the feature gate name and the components for which it must be enabled
feature-gates:
  - name: NFTablesProxyMode
    components:
      - kube-proxy
disable-supported: true

# The following PRR answers are required at beta release
metrics:
  - sync_proxy_rules_duration_seconds
  - sync_proxy_rules_last_queued_timestamp_seconds
  - sync_proxy_rules_last_timestamp_seconds
  - sync_proxy_rules_endpoint_changes_pending
  - sync_proxy_rules_endpoint_changes_total
  - sync_proxy_rules_service_changes_pending
  - sync_proxy_rules_service_changes_total
  - proxy_healthz_total
  - proxy_livez_total
  - network_programming_duration_seconds
  - sync_proxy_rules_no_local_endpoints_total
  - sync_proxy_rules_nftables_cleanup_failures_total
  - sync_proxy_rules_nftables_sync_failures_total