Containers

Tag: Amazon VPC

Application Networking with Amazon VPC Lattice and Amazon EKS

Introduction AWS customers building cloud-native applications or modernizing applications using microservices architecture can adopt Amazon Elastic Kubernetes Service (Amazon EKS) to accelerate innovation and time to market while lowering their total cost of ownership. Many customers operate multiple Amazon EKS clusters to provide better tenant isolation and to meet organizational requirements. Often, there’s a need […]

Fully private local clusters for Amazon EKS on AWS Outposts powered by VPC Endpoints

Introduction Recently, Amazon Elastic Kubernetes Service (Amazon EKS) added support for local clusters on AWS Outposts racks. In a nutshell, this deployment option allows our customers to run the entire Kubernetes cluster (i.e., control plane and worker nodes) on AWS Outposts racks. The rationale behind this deployment option is often described as static stability. In […]

A deeper look at Ingress Sharing and Target Group Binding in AWS Load Balancer Controller

Introduction AWS Load Balancer Controller is a Kubernetes controller that integrates Application Load Balancers (ALB) and Network Load Balancers (NLB) with Kubernetes workloads. It allows you to configure and manage load balancers using Kubernetes Application Programming Interface (API). Based on our conversations with customers, we identified two AWS Load Balancer Controller features that need further […]

Addressing IPv4 address exhaustion in Amazon EKS clusters using private NAT gateways

Addressing IPv4 address exhaustion in Amazon EKS clusters using private NAT gateways

Introduction The Amazon VPC Container Network Interface (CNI) plugin creates many advantages for pod networking when deployed on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. First, it lets us reuse proven, battle-tested Amazon Virtual Private Cloud (Amazon VPC) networking and security best practices for building Kubernetes clusters on AWS. This allows us to use […]

Read our blog post about leveraging CNI custom networking alongside security groups for pods in Amazon EKS.

Leveraging CNI custom networking alongside security groups for pods in Amazon EKS

Introduction Amazon Elastic Kubernetes Service (Amazon EKS) is a managed service that runs Kubernetes on AWS without needing to install, operate, and maintain your own Kubernetes control plane or nodes. Amazon EKS supports native virtual private cloud (VPC) networking with the Amazon VPC Container Network Interface (CNI) plugin for Kubernetes. This plugin assigns a private […]

Observability for AWS App Runner VPC networking

With AWS App Runner, you can quickly deploy web applications and APIs at any scale. You can start with your source code or a container image, and App Runner will fully manage all infrastructure, including servers, networking, and load balancing for your application. If you want, App Runner can also configure a deployment pipeline for […]

Deep Dive on AWS App Runner VPC Networking

AWS App Runner, introduced in 2021, is a fully managed service for running web applications and API servers. App Runner greatly simplifies the experience to build and run secure web server applications with little to no infrastructure in your account. You provide the source code or a container image, and App Runner will build and […]

EKS VPC routable IP address conservation patterns in a hybrid network

Introduction Our customers are embracing containers and Kubernetes/EKS for the flexibility and the agility it affords their developers. As environments continue to scale, they want to find ways to more efficiently utilize their private RFC1918 IP address space. This post will review patterns to help conserve your RFC1918 IP address space with your EKS pods leveraging […]

ECR PrivateLink architectural diagram

AWS PrivateLink ECR cross account Fargate deployment

AWS PrivateLink is a networking technology designed to enable access to AWS services in a highly available and scalable manner. It keeps all the network traffic within the AWS network. When you create AWS PrivateLink endpoints for Amazon Elastic Container Registry (ECR) and Amazon Elastic Container Service (ECS), these service endpoints appear as elastic network […]