The NodePort DSR feature does not work for service endpoints which run in the host netns (hostNetwork: true). The problem is that parsing the IP options, populating the BPF map with service IP addr + port for the rev-DNAT xlation, etc is implemented in bpf_lxc, which, obviously, is not attached to such endpoints.