• eks best practice for networking

# testing
nslookup <any>.localdev.me # return loopback

# example of internal address
redis-master.default.svc.cluster.local

• Virtual IP and Service proxy

• Using Source IP

• Service

• Ingress

  • https://github.com/caddyserver/ingress - Caddy Ingress Controller

  • https://github.com/megaease/easegress

  • https://github.com/TykTechnologies/tyk-operator

  • traefik as ingress

  • https://www.pomerium.com/

  • https://www.nginx.com/products/nginx-ingress-controller/

  • https://docs.kusk.io/

  • https://docs.konghq.com/ — Good examples of ingress setup
    • https://docs.konghq.com/kubernetes-ingress-controller/latest/

  • https://docs.solo.io/gloo-edge/latest/

  • https://haproxy-ingress.github.io/

  • List of IngressControllers

  • NGINX

    • https://kubernetes.github.io/ingress-nginx/deploy/

    • https://www.bogotobogo.com/DevOps/Docker/Docker_Kubernetes_Nginx_Ingress_Controller_for_Dashboard_on_Minikube.php

    • https://dockerlabs.collabnix.com/kubernetes/beginners/Installing-Nginx-Ingress-controller.html - nice graphics

  • NGINX

    • https://kubernetes.github.io/ingress-nginx/deploy/

    • Security nginx ingress

    • https://github.com/kubernetes/ingress-nginx
      • Ingress Annotations
      • https://kubernetes.github.io/ingress-nginx/

    • nginx: What is this option in config? opentelemetry

  • ingress and ingress controller

  • AWS Load Balancer Controller

  • Ingress-Nginx Controller

  • nginx hardening guide

  • Exposing External IP

  • Exposing Kubernetes Applications

    • part1 - part2 - part3

  • LoadBalancer

    • MetalLB

    • AWS Exposing Apps

• Cert Manager

  • https://cert-manager.io/

  • DNS01 Route53

  • https://cert-manager.io/docs/configuration/acme/dns01/

• DNS

  • CoreDNS

    • https://coredns.io/

    • https://coredns.io/plugins/loop/#troubleshooting

  • https://github.com/kubernetes-sigs/external-dns
    • Article about

  • https://github.com/kubernetes-sigs/external-dns

• kube-vip

  • https://kube-vip.io/

• Zero Trust

  • Architect Blog - Zero Trust Networking

• Example of port-forward

  kubectl port-forward -n weave "$(kubectl get -n weave pod \
  --selector=weave-scope-component=app -o jsonpath='{.items..metadata.name}')" \
  4040

• cert-manager

  • https://cert-manager.io/

  • Use Route53 DNS challenge

  • https://cert-manager.io/docs/reference/api-docs/

  • aws private ca - only for private networks

    • https://github.com/cert-manager/aws-privateca-issuer

    • https://aws-quickstart.github.io/cdk-eks-blueprints/addons/aws-privateca-issuer/

    • EKS with alb and aws pca issuer

• Service Mesh

  • https://istio.io/

  • OpenServiceMesh

• k8s gateway

  • Kubernetes Gateway API Overview