# Kernel modules loaded at boot by init # One module per line. Lines starting with # are ignored. # Modules are loaded in order listed. # Networking — bridge and netfilter (required for K8s pod networking) br_netfilter bridge veth vxlan # Netfilter / iptables (required for kube-proxy and service routing) ip_tables iptable_nat iptable_filter iptable_mangle nf_nat nf_conntrack nf_conntrack_netlink # Filesystem — overlay (required for containerd) overlay # Conntrack (required for K8s services) nf_conntrack # Optional — useful for CNI plugins and diagnostics tun ip_vs ip_vs_rr ip_vs_wrr ip_vs_sh