Best Practices - Utilizing AKS services from EKS

0

We have Azure AKS services exposed to a service running in AWS EKS. Is there a guidance on practices that should be followed for this use-case and have a secure connectivity? I have researched couple of options like VPC Lattice and/or API Gateway with site-to-site VPN or Direct Connect.

1 個回答
1
已接受的答案

Usually the connectivity between services running in different K8s clusters is done by multiple options. And the option depends on specific use-case, constraints (security/operational) and requirements. Let me give you some of the options here that might apply in your scenario.

  1. Hybrid DNS Solutions – Pros: DNS-based discovery across clusters in different clouds. Cons: Latency
  2. Direct Internet Access – can be don’t use API Gateways. Pros: Cross-cloud communication. Security controls at API level. Cons: Latency, Public Endpoints, API Security Overhead
  3. VPC Peering – if both clusters are in VPCs. Pros: Direct private IP connectivity. Low latency. Cons: Route configuration. Firewall rules.
  4. VPN Connection – Connection between AWS VPC and Azure VNet. Pros Secure encrypted tunnel. Caters to hybrid cloud environment.
  5. Service Mesh – Istio etc. Pros: Provides unified way for secure communication. Cons: Adds complexity.

Considerations – think about security not only in the network but within each K8s cluster. Simplify it using IAM and RBAC.

I hope this helps.

AWS
已回答 7 個月前
profile picture
專家
已審閱 1 個月前
  • Thank you! That really helps.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南