This guide explains why an AWS EKS ALB Ingress with target‑type ip can mark pods as unhealthy despite internal connectivity, and provides step‑by‑step instructions to correctly configure the ALB and pod security groups, health‑check sources, NACLs, and debugging tips.
The article explains what a Virtual Private Cloud (VPC) is, how it creates an isolated, customizable network on a cloud provider, outlines its core components such as subnets, gateways, and peering, and details security designs, traffic flows, and advanced scenarios like high‑availability and hybrid cloud integration.
This article explains virtual network security mechanisms, including security groups, network ACLs, QoS policies, and quality‑assurance techniques, detailing implementations with Linux Bridge, iptables, OVS, conntrack, and DPDK, and discusses active probing and passive observation for network reliability.
This article provides a deep technical walkthrough of Alibaba Cloud's Terway ENI‑Trunking mode, explaining its architecture, pod‑level networking resources, VLAN‑based traffic steering, security‑group handling, and ten concrete SOP scenarios that illustrate how data packets travel between pods, services, and external clients.
This article explains how Kube-OVN implements security groups and port security for Kubernetes pods by leveraging OVN port groups, address sets, and ACLs, detailing the CRD design, annotation usage, and the workflow that synchronizes pod network interfaces with security policies.
This article explains how Kube-OVN leverages OVN/OVS to provide pod port security and OpenStack‑style security groups through custom CRDs, annotations, address sets, and ACL rules, detailing the underlying mechanisms and workflow for managing network security in Kubernetes.
