AWS Network

VPC

Virtual Private Cloud.

EC2的私有内部网络.

  • subnets
  • route tables
  • internet gateways
  • nat gateways

ENI: Elastic network interfaces.

pic

ELB

ELB: Elastic Load Balancing

弹性负载均衡,可以和EC2,ECS和lambda集成.

https://aws.amazon.com/cn/elasticloadbalancing/features/

支持四种负载均衡器:

  • Classic Load Balancer(默认)
  • Gateway Load Balancer
  • Application Load Balancer(ALB)
  • Network Load Balancer(NLB)

https://github.com/kubernetes-sigs/aws-load-balancer-controller

  • k8s Ingress resource对应ALB.
  • k8s Service resource对应NLB.

通过service annotation使用NLB:

service.beta.kubernetes.io/aws-load-balancer-type: external
service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip/instance
service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing/internal

需要给AWS subnet加tag:
kubernetes.io/cluster/${cluster-name}: owned/shared
// 使用public subnet(internet-facing)
kubernetes.io/role/elb: 1
// 使用private subnet
kubernetes.io/role/internal-elb: 1

通过ingress annotation使用ALB:

kubernetes.io/ingress.class: alb
alb.ingress.kubernetes.io/target-type: ip/instance
alb.ingress.kubernetes.io/scheme: internet-facing/internal

Route 53

DNS服务.

在route 53创建托管区(hosted zones)之后,可以在ACM申请证书。

申请好了证书,需要在route 53创建记录.

API Gateway

CloudFront

CDN服务.


Direct Connect

提供数据中心和AWS直连。

AWS App Mesh

AWs Cloud Map

Global Accelerator