What is "Service IPv4 range" in EKS console?
0
The help page in the console describes it as
The IP address range from which cluster services will receive IP addresses.
So what are "cluster services"? Is that the control plane or something else?
asked 2 months ago9 views
2 Answers
1
https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service https://kubernetes.io/docs/concepts/services-networking/service/#virtual-ips-and-service-proxies
The range listed is used for the virtual IPs for the services. For example:
kubectl get svc -A -o=custom-columns='DATA:spec.clusterIP'
DATA
172.20.74.199
172.20.0.1
172.20.123.203
172.20.0.10
answered 2 months ago
1
This is the IP address range used by Kubernetes services, see the launch announcement and the relevant documentation (click "AWS Management Console" tab and scroll down to the relevant description).
answered 2 months ago
Relevant questions
Issues in EKS is causing new EC2 instances to spin off
asked 3 years agoAWS Global Accelerator IP Subnet Range not up to date in ip-ranges.json
asked a month agoHow many Load Balancers of what schemes are actually required while creating an ECS cluster with AutoScaling Via Capacity Provider?
asked 3 months agoEKS Cluster stuck in updating
asked 2 months agoWhat is "Service IPv4 range" in EKS console?
asked 2 months agoAmazon EKS service IP addresses
asked 2 months agoEKS Fargate: restrict access to service to only certain pods
asked 2 months agoAbout dynamic change of IP address
asked 14 days agoUnable to create EKS Cluster
asked 22 days agoVPC Peering and DNS resolution of a public Amazon Redshift cluster
Accepted Answerasked 2 years ago
Thanks, that's helpful. So if I understand it right, this range is used for ClusterIP services which are only accessible to containers running in the cluster. Packets addressed to them are intercepted by iptables rules and redirected. That means that they never make it to an actual network interface which is why the addresses can and should be outside of the CIDR range used by the VPC.