Service networking & kube-proxy
From ClusterIP to an endpoint via iptables/IPVS.
In plain terms
kube-proxy is the switchboard wiring: it quietly forwards a call for a Service’s number to a real, available pod. It sets up the wiring but doesn’t sit on the call itself, so it’s fast.