Deal with Pod IP Exhaustion
This architecture shows how to deal with pod IP exhaustion by adding secondary CIDR blocks from the RFC 6598
Deal with Pod IP Exhaustion
The following steps describe the inbound external flow:
-
Amazon Route 53 resolves incoming requests to the public ELB deployed by the AWS Load Balancer Controller.
-
The ELBs forward traffic to applications. You choose between instance mode (traffic sent to a worker node, then the service redirects to the pod) or IP mode (traffic directed to the pod IP directly).
The following steps describe the inbound internal flow:
-
Amazon Route 53 resolves incoming requests to the private ELB deployed by the AWS Load Balancer Controller
using a private hosted zone. -
The ELBs forward traffic to applications in instance mode or IP mode.
The following steps describe the outbound external flow:
-
A pod in a private subnet initiates an outbound request to the internet. The private route table forwards traffic to the NAT gateway (NGW).
-
The public route table forwards traffic from the NGW to the internet gateway (IGW).
The following steps describe the outbound internal flow:
-
A pod in a private subnet initiates an outbound request to the on-premises network. The private route table forwards traffic to the virtual private gateway (VGW).
-
Traffic reaches the on-premises network over the VPN or AWS Direct Connect connection.
Note
The default behavior of Amazon EKS is to source NAT pod traffic to the primary IP address of the hosting worker node. AWS Fargate
Further reading
For additional information, refer to the following resources:
Diagram history
To be notified about updates to this reference architecture diagram, subscribe to the RSS feed.
| Change | Description | Date |
|---|---|---|
Reference architecture diagram first published. | February 22, 2022 | |
Initial publication | Reference architecture diagram first published. | February 22, 2022 |
Reference architecture diagram first published. | February 22, 2022 |
Note
To subscribe to RSS updates, you must have an RSS plugin enabled for the browser you are using.
