pkg syscall (darwin-arm64), const TCP_KEEPINTVL = 257
pkg syscall (darwin-arm64), const TCP_KEEPINTVL ideal-int
pkg syscall (darwin-arm64), const TCP_MAXHLEN = 60
pkg syscall (darwin-arm64), const TCP_MAXHLEN ideal-int
pkg syscall (darwin-arm64), const TCP_MAXOLEN = 40
pkg syscall (darwin-arm64), const TCP_MAXOLEN ideal-int
pkg syscall (darwin-arm64), const TCP_MAXSEG = 2
pkg syscall (darwin-arm64), const TCP_MAXSEG ideal-int

pkg syscall (netbsd-arm64-cgo), const TCP_KEEPINTVL = 5
pkg syscall (netbsd-arm64-cgo), const TCP_KEEPINTVL ideal-int
pkg syscall (netbsd-arm64-cgo), const TCP_MAXBURST = 4
pkg syscall (netbsd-arm64-cgo), const TCP_MAXBURST ideal-int
pkg syscall (netbsd-arm64-cgo), const TCP_MAXSEG = 2
pkg syscall (netbsd-arm64-cgo), const TCP_MAXSEG ideal-int
pkg syscall (netbsd-arm64-cgo), const TCP_MAXWIN = 65535

  // Number of port to expose on the pod's IP address.
  // This must be a valid port number, 0 < x < 65536.
  optional int32 containerPort = 3;

  // Protocol for port. Must be UDP, TCP, or SCTP.
  // Defaults to "TCP".
  // +optional
  // +default="TCP"
  optional string protocol = 4;

  // What host IP to bind the external port to.
  // +optional
  optional string hostIP = 5;
}

- `kubelet` allows pods to use the `net.ipv4.tcp_fin_timeout`, “net.ipv4.tcp_keepalive_intvl”
  and “net.ipv4.tcp_keepalive_probes“ sysctl by default; Pod Security Admission
  allows this sysctl in `v1.29+` versions of the baseline and restricted policies. ([#121240](https://github.com/kubernetes/kubernetes/pull/121240), [@HirazawaUi](https://github.com/HirazawaUi))
- `kubelet` now allows pods to use the `net.ipv4.tcp_keepalive_time` sysctl by default

- Service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset is removed.  All Standard load balancers will always enable tcp resets. ([#94297](https://github.com/kubernetes/kubernetes/pull/94297), [@MarcPow](https://github.com/MarcPow)) [SIG Cloud Provider]

- GCE does not support LoadBalancer Services with ports with different protocols (TCP and UDP) ([#115966](https://github.com/kubernetes/kubernetes/pull/115966), [@aojea](https://github.com/aojea)) [SIG Apps and Cloud Provider]

## Changelog since v1.23.16

## Changes by Kind

### Feature

- Kubelet TCP and HTTP probes are more effective using networking resources: conntrack entries, sockets, ... 

*   You can once again use 0 values for conntrack min, max, max per core, tcp close wait timeout, and tcp established timeout; this functionality was broken in 1.8. ([#55261](https://github.com/kubernetes/kubernetes/pull/55261),[ @ncdc](https://github.com/ncdc))

#### **CoreDNS**

#### kube-controller-manager:
- Azure service annotation service.beta.kubernetes.io/azure-load-balancer-disable-tcp-reset has been deprecated. Its support would be removed in a future release. ([#88462](https://github.com/kubernetes/kubernetes/pull/88462), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]

#### kubelet:

- SCTP is now supported as an additional protocol (alpha) alongside TCP and UDP in Pod, Service, Endpoint, and NetworkPolicy.  ([#64973](https://github.com/kubernetes/kubernetes/pull/64973), [@janosi](https://github.com/janosi)) Courtesy of SIG API Machinery, SIG Apps, SIG Architecture, SIG CLI, SIG Cloud Provider, SIG...