我在 Buster 主机上有 Debian 10 (Buster( KVM 客户机。尝试在 Debian wiki 之后的虚拟机上切换到旧版iptables
update-alternatives --set iptables /usr/sbin/iptables-nft
update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
update-alternatives --set arptables /usr/sbin/arptables-nft
update-alternatives --set ebtables /usr/sbin/ebtables-nft
当其他三个成功时，arptables更新失败并显示消息
update-alternatives: error: alternative /usr/sbin/arptables-legacy for arptables not registered; not setting
有解决方法吗？
如果你好奇，来宾机器是使用 kubeadm 发起的 Kubernetes (v1.18( 集群的节点。网络插件是Calico。一切都适用于默认nftables设置，除了 MetalLB 控制器错误
1 reflector.go:125] pkg/mod/k8s.io/client-go@v0.0.0-20190620085101-78d2af792bab/tools/cache/reflector.go:98: Failed to list *v1.ConfigMap: Get https://10.96.0.1:443/api/v1/namespaces/metallb-system/configmaps?fieldSelector=metadata.name%3Dconfig&limit=500&resourceVersion=0: dial tcp 10.96.0.1:443: i/o timeout
当我从来宾 VMping 10.96.0.1时，我得到
PING 10.96.0.1 (10.96.0.1) 56(84) bytes of data.
From 94.157.208.1 icmp_seq=1 Packet filtered
From 94.157.208.1 icmp_seq=2 Packet filtered
...
--- 10.96.0.1 ping statistics ---
7 packets transmitted, 0 received, +7 errors, 100% packet loss, time 15ms
首先，您需要安装旧版软件包：
sudo apt-get install -y iptables arptables ebtables
然后更新替代方案：
sudo update-alternatives --set iptables /usr/sbin/iptables-legacy
sudo update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
sudo update-alternatives --set arptables /usr/sbin/arptables-legacy
sudo update-alternatives --set ebtables /usr/sbin/ebtables-legacy