-- FengpingHu - 13 Aug 2021

calico configuration.

By default calico sets ipipMode to "always", but this is not the recommended setting. We also noticed sometimes pod can't be reached when it's routed through the tun interface. Disable overlay network would give the highest performance and simplest network -- ref

Here's how this is done -- Be aware that switching encapsulation modes can cause disruption to in-progress connections. Plan accordingly.

kubectl edit IPPool default-ipv4-ippool

change ipipMode from "always" to "CrossSubnet"