AWS Network

VPC

Virtual Private Cloud.

EC2的私有内部网络.

• subnets
• route tables
• internet gateways
• nat gateways

ENI: Elastic network interfaces.

pic

ELB

ELB: Elastic Load Balancing

弹性负载均衡，可以和EC2,ECS和lambda集成.

https://aws.amazon.com/cn/elasticloadbalancing/features/

支持四种负载均衡器：

• Classic Load Balancer(默认)
• Gateway Load Balancer
• Application Load Balancer(ALB)
• Network Load Balancer(NLB)

https://github.com/kubernetes-sigs/aws-load-balancer-controller

• k8s Ingress resource对应ALB.
• k8s Service resource对应NLB.

通过service annotation使用NLB:

service.beta.kubernetes.io/aws-load-balancer-type: external
service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: ip/instance
service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing/internal

需要给AWS subnet加tag:
kubernetes.io/cluster/${cluster-name}: owned/shared
// 使用public subnet(internet-facing)
kubernetes.io/role/elb: 1
// 使用private subnet
kubernetes.io/role/internal-elb: 1

通过ingress annotation使用ALB:

kubernetes.io/ingress.class: alb
alb.ingress.kubernetes.io/target-type: ip/instance
alb.ingress.kubernetes.io/scheme: internet-facing/internal

Route 53

DNS服务.

在route 53创建托管区(hosted zones)之后，可以在ACM申请证书。

申请好了证书，需要在route 53创建记录.

API Gateway

CloudFront

CDN服务.

Direct Connect

提供数据中心和AWS直连。

AWS App Mesh

AWs Cloud Map

Global Accelerator