github/awesome-kubernetes
1
0
Fork 0
mirror of https://github.com/nubenetes/awesome-kubernetes.git synced 2026-07-12 18:00:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
f9e994778aacea0aed51d4f7ccded9c643a72121
awesome-kubernetes/v2-docs/aws-networking.md

31 KiB
Raw Blame History

AWS Networking

!!! info "Architectural Context" Detailed reference for AWS Networking in the context of Cloud Providers (Hyperscalers).

Table of Contents

  1. Architectural Foundations
  1. Cloud Infrastructure
  1. Networking
  1. Software Engineering

Architectural Foundations

Kubernetes Tools

General Reference

Cloud Infrastructure

AWS

API Gateway

Architecture
  • (2020) alexdebrie.com: A Detailed Overview of AWS API Gateway [COMMUNITY-TOOL] — An extensive architectural analysis of AWS API Gateway, deconstructing HTTP APIs, REST APIs, and WebSockets. Provides deep insights into routing, request validation, and authorization strategies that underpin serverless microservices architectures.
Cross-Account Patterns

Architecture Best Practices

  • (2018) cloudonaut.io: What Architects Need to Know About Networking on AWS [COMMUNITY-TOOL] — A rigorous exploration of architectural decision-making within AWS networking. Focuses on the trade-offs of VPC endpoints, routing tables, and peering limits. Grounded in 2026 engineering truths, this piece highlights the shift from complex transit VPCs to Transit Gateway standards.

CDN

CloudFront
  • (2016) Amazon CloudFront now supports HTTP/2 [DOCUMENTATION] [COMMUNITY-TOOL] — Announces native HTTP/2 support in CloudFront, highlighting performance gains from request multiplexing and header compression. A major historical milestone for fast content delivery networks, paving the way for modern responsive web applications.
Edge Security

DNS and Domain Management

Route 53
  • (2021) How do I transfer a domain to AWS from another registrar? [DOCUMENTATION] [COMMUNITY-TOOL] — A granular tutorial on migrating DNS management to Amazon Route 53 from external registrars. While straightforward, real-world deployment requires careful TTL planning and nameserver transition strategies to prevent query dropouts and route interruptions during migration.

Direct Connect

BGP Routing
  • (2019) aws.amazon.com: Creating active/passive BGP connections over AWS Direct Connect [ADVANCED LEVEL] [COMMUNITY-TOOL] — Explores advanced Route-Maps and BGP configuration options to establish resilient active/passive patterns on AWS Direct Connect. Explains path selection using AS-Path prepending and local preference. Critical for hybrid enterprise integrations demanding robust automated failover.

EC2 Networking

ENA
  • (2016) Elastic Network Adapter [ADVANCED LEVEL] [COMMUNITY-TOOL] — Analyzes the high-performance ENA interface designed for AWS EC2 instances. Live architectures rely heavily on ENA for low-latency network performance and SR-IOV-enabled network virtualization up to 100 Gbps. Crucial for understanding network throughput bottlenecks in heavy database and distributed systems workloads.

IP Range Utilities

  • (2018) github.com/seligman/aws-ip-ranges: AWS's ip-ranges.json ⭐ 286 🌟🌟🌟 [LEGACY] — A vital open-source parser designed to track dynamic AWS IP range changes from ip-ranges.json. Essential for configuring robust hybrid on-premises firewalls and programmatic security rules. Modern setups frequently replace manual parsing with AWS Managed Prefix Lists, rendering manual scripts legacy but historically significant.

Kubernetes Networking

Controllers
  • (2020) Introducing the AWS Load Balancer Controller [ADVANCED LEVEL] [COMMUNITY-TOOL] — Introduces the Kubernetes-native controller that provisions ALBs and NLBs directly from EKS Ingress and Service objects. A de facto standard in EKS architectures, replacing generic reverse proxies with tightly integrated AWS-managed application delivery controllers.

Load Balancing

Announcements
  • (2016) aws blogs - New – AWS Application Load Balancer [COMMUNITY-TOOL] — The foundational blog post introducing AWS ALB in 2016, revolutionizing container and microservices ingress on AWS. Contrasts CLB's limitations with ALB's ability to host multiple target groups on a single instance port, enabling dense ECS/EKS hosting.
Application Load Balancer
  • (2020) Application Load Balancer [DOCUMENTATION] [COMMUNITY-TOOL] — The authoritative landing page for AWS ALB, highlighting its Layer 7 request routing capabilities, HTTP/2 support, and WAF integrations. Modern microservices rely on ALB's path-based and host-based routing to expose APIs dynamically.
Configuration Updates
Deep Dive
  • (2016) AWS Summit Series 2016 | London: Deep Dive on Elastic Load Balancing [ADVANCED LEVEL] [LEGACY] — A detailed architectural retrospective on AWS ELB, tracing its path from Classic Load Balancer (CLB) to specialized Application (ALB) and Network (NLB) balancers. While archived, it provides unmatched technical insights into early AWS software-defined networking design.
Documentation
  • (2020) docs.aws.amazon.com: What Is Elastic Load Balancing? [DOCUMENTATION] [COMMUNITY-TOOL] — The official guide detailing the operational mechanics of Application, Network, Gateway, and Classic load balancers. Details targets, health checks, and cross-zone routing configurations. This represents the primary blueprint for modern ingress systems.
Network Load Balancer
  • (2021) ably.com: Balancing act: the current limits of AWS network load balancers [ADVANCED LEVEL] [COMMUNITY-TOOL] — A highly critical real-world analysis detailing the edge-case limitations of AWS Network Load Balancers under extreme load. Outlines connection resets, silent drops, and target group scaling constraints. Live systems use this data to plan high-throughput gRPC and WebSocket infrastructure.
  • (2020) Resolve DNS names of Network Load Balancer nodes to limit cross-Zone traffic [ADVANCED LEVEL] [COMMUNITY-TOOL] — Investigates NLB node DNS resolution mechanisms to control cross-zone traffic costs. A critical reference for low-latency systems. Curator insight underlines zonal isolation; live operations utilize cross-zone disabling to reduce inter-availability zone latency and data transfer costs.
Serverless Integration
  • (2020) dashbird.io: AWS Elastic Load Balancing from a Serverless perspective [COMMUNITY-TOOL] — Analyzes Application Load Balancer configurations when integrated with serverless backends like AWS Lambda. Details pricing, cold-starts, and architectural trade-offs compared to API Gateway. Live systems often choose ALB for cost-effective, high-volume HTTP routing.

Network Management

  • (2019) aws.amazon.com: Network operations with AWS Network Manager [DOCUMENTATION] [COMMUNITY-TOOL] — Focuses on AWS Network Manager as a single pane of glass for monitoring global hybrid networks. Live cloud architectures utilize Network Manager to synthesize telemetry from AWS Transit Gateway, SD-WAN devices, and on-premises branch offices into actionable alerts.

Networking Concepts

  • (2020) AWS Networking for Developers [COMMUNITY-TOOL] — Synthesizes AWS's core networking constructs for software engineers. While early guides treat VPC and subnetting as peripheral, modern development architectures position these as foundational security boundaries. The guide details CIDR blocks, VPC structure, and security groups.

Networking Pitfalls

  • (2019) cloudonaut.io: Advanced AWS Networking: Pitfalls That You Should Avoid [ADVANCED LEVEL] [COMMUNITY-TOOL] — Deconstructs highly complex pitfalls in AWS network implementations, specifically Route 53 routing loops and VPC peering scaling bottlenecks. While historic guides suggest basic VPC peers, live production systems demand Transit Gateways and PrivateLink to scale securely without IP overlap.

Networking Tutorials

  • (2020) AWS Cloud Networking – Zero to Hero [LEGACY] — Provides a step-by-step pathway from basic networking to comprehensive AWS network design. Contrasts entry-level topologies with complex multi-region enterprise structures. Essential reading for operations personnel migrating legacy on-prem networks to standard AWS subnets and VPC peers.

Performance Optimization

  • (2018) Find the fastest region from your location [COMMUNITY-TOOL] — An essential community-built utility for testing regional latencies directly from client browsers to AWS data centers. Critical for architects choosing optimal regions for low-latency interactive applications and global disaster recovery architectures.

RDS

VPC Integration
  • (2016) Specifying the VPC for your Amazon RDS DB Instance [DOCUMENTATION] [COMMUNITY-TOOL] — Documents the structural capability to assign Amazon RDS database instances to isolated VPC subnets. Critical for security architecture, establishing clear boundary isolation where databases exist in strictly private subnets separated from public app tiers.

Remote Access VPN

  • (2019) cloudonaut.io: AWS Client VPN: Connected with the Cloud [COMMUNITY-TOOL] — Evaluates AWS Client VPN as a fully managed client-to-site VPN service. Contrasts self-managed OpenVPN boxes with AWS's elastic scale, highlighting directory service integrations, routing configurations, and target network associations.

Reverse Proxy

NGINX Plus
  • (2016) NGINX Plus on the AWS Cloud: Quick Start Reference Deployment [DOCUMENTATION] [LEGACY] — A legacy but highly informative deployment blueprint for configuring high-availability NGINX Plus instances on AWS. Explains load-balancing patterns, session persistence, and active health checks that bridge standard EC2 architectures with NGINX's enterprise proxy features.

Security

DDoS Resiliency
  • (2022) Configuring Route 53 for cost protection from NXDOMAIN attacks [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Examines security blueprints to mitigate Route 53 billing anomalies caused by NXDOMAIN flood attacks. Demonstrates Route 53 Resolver query logging, caching, and CloudFront-to-Route53 integrations. Essential for enterprise architectural planning to protect cloud budgets from DDoS vectors.
EC2 Connect
Gateway Load Balancer
  • (2021) Centralized Traffic Inspection with Gateway Load Balancer on AWS [ADVANCED LEVEL] [COMMUNITY-TOOL] — Provides reference architectures for Gateway Load Balancer (GWLB), routing ingress traffic through third-party virtual security appliances (firewalls, IDS/IPS). Employs GENEVE encapsulation to maintain transparent client source IPs across the inspection cluster.
WAF
  • (2024) AWS WAF enhances rate-based rules to support lower rate limits [ADVANCED LEVEL] [DOCUMENTATION] [COMMUNITY-TOOL] — Highlights the critical update reducing AWS WAF rate-based rule limits to protect low-traffic APIs and login endpoints from brute-force attacks. Provides developers with more granular rate-limiting controls to prevent application abuse at the edge.

VPC

CLI Administration
  • (2014) linuxjournal.com: AWS EC2 VPC CLI [LEGACY] — A legacy reference guide exploring early AWS CLI tools used to configure VPC environments. While historical, it charts the evolution from raw manual terminal commands to modern declarative Infrastructure-as-Code tooling like Terraform and AWS CDK.
Fundamentals
  • (2019) awsfundamentals.blogspot.com: AWS Virtual Private Cloud - VPC [COMMUNITY-TOOL] — A high-level introductory guide detailing the core components of Amazon VPCs, including Subnets, Route Tables, Internet Gateways, and Security Groups. Ideal for engineers transitioning from traditional infrastructure to virtualized cloud networks.
VPC Endpoints

VPC Architecture

VPN and Overlay Networks

Tailscale
  • (2022) tailscale.com: Connect to an AWS VPC using subnet routes [DOCUMENTATION] [COMMUNITY-TOOL] — Details the installation of Tailscale inside an AWS VPC to build low-overhead overlay networks using subnet routing. Real-world engineering proves that Tailscale's WireGuard-based routing simplifies cross-cloud access without the complexity of traditional IPsec VPNs.

Azure Networking

Hybrid Connectivity

  • (2025) Azure ExpressRoute Resiliency: Best Practices for Production-Critical Workloads [N/A CONTENT] [ADVANCED LEVEL] [COMMUNITY-TOOL] — Examines best practices for designing resilient Azure ExpressRoute topologies to safeguard production-critical hybrid cloud environments. Architects are guided through configuring dual-homing, active-active paths, BFD (Bidirectional Forwarding Detection), and automated failover strategies to prevent network isolation.

Networking

Performance

Diagnostics

  • (2018) Linkedin Discussion [N/A CONTENT] [COMMUNITY-TOOL] — Engineering discussion concerning performance profiling accuracy. Discusses latency calculation rules, warning against single-request testing owing to initial DNS resolution overhead and recommending at least a three-step request test pattern for reliable analytics.

Software Engineering

Deployment Patterns

Blue-Green

ALB
  • (2021) Fine-tuning blue/green deployments on application load balancer [ADVANCED LEVEL] [COMMUNITY-TOOL] — Focuses on ALB's advanced routing capabilities to orchestrate safe blue/green deployments by shifting traffic percentages between target groups. A crucial operational pattern for continuous delivery pipelines, minimizing deployment blast radius.

💡 Explore Related: Googlecloudplatform | AWS Pricing | AWS Spain

Reference in New Issue View Git Blame Copy Permalink