# What does Direct Server Return (DSR) mode change in Cilium's NodePort and LoadBalancer handling?

Cilium, Hard (Expert), Networking. https://k8wiz.com/uquiz/what-does-direct-server-return-dsr-mode-change-in-ciliums-nodeport-and-loadbalancer-handling

- A. Backends reply to the client directly, not via the ingress node
- B. Clients connect straight to the pod IP and skip the Service
- C. Replies are encrypted with WireGuard on the way back
- D. Health checks go straight to pods instead of through nodes

**Answer:** Backends reply to the client directly, not via the ingress node

**Explanation:** In the default SNAT mode, a node that forwards a request to a backend on another node rewrites the source address, so the reply has to come back through it. In DSR mode the forwarding node keeps the client address and passes the service address along with the packet, so the backend can reply to the client directly. That saves a hop and lets the backend see the client IP.