AWS Network
Contents
[NOTE] Updated April 23, 2021. This article may have outdated content or subject matter.
AWS Network
VPC
Virtual Private Cloud.
EC2的私有内部网络.
- subnets
- route tables
- internet gateways
- nat gateways
ENI: Elastic network interfaces.
ELB
ELB: Elastic Load Balancing
弹性负载均衡,可以和EC2,ECS和lambda集成.
https://aws.amazon.com/cn/elasticloadbalancing/features/
支持四种负载均衡器:
- Classic Load Balancer(默认)
- Gateway Load Balancer
- Application Load Balancer(ALB)
- Network Load Balancer(NLB)
https://github.com/kubernetes-sigs/aws-load-balancer-controller
- k8s Ingress resource对应ALB.
- k8s Service resource对应NLB.
通过service annotation使用NLB:
service.beta.kubernetes.io/aws-load-balancer-type: external
service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip/instance
service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing/internal
需要给AWS subnet加tag:
kubernetes.io/cluster/${cluster-name}: owned/shared
// 使用public subnet(internet-facing)
kubernetes.io/role/elb: 1
// 使用private subnet
kubernetes.io/role/internal-elb: 1
通过ingress annotation使用ALB:
kubernetes.io/ingress.class: alb
alb.ingress.kubernetes.io/target-type: ip/instance
alb.ingress.kubernetes.io/scheme: internet-facing/internal
Route 53
DNS服务.
在route 53创建托管区(hosted zones)之后,可以在ACM申请证书。
申请好了证书,需要在route 53创建记录.
API Gateway
CloudFront
CDN服务.
Direct Connect
提供数据中心和AWS直连。
AWS App Mesh
AWs Cloud Map
Global Accelerator
Author Canux
LastMod 23047-10-10T42:22:319