~/ nmadiraju.com Amazon EKS · EKS Hybrid Nodes
arrow_back Back to nmadiraju
Visual Walkthrough · Amazon EKS compute

How EKS Hybrid Nodes Work on Amazon EKS

Follow plant-1 and plant-2 as they join shop-prod from a factory floor, then check yourself with 8 questions.

1Visual Walkthrough

Two factory servers joined to an EKS cluster in us-east-1 as hybrid nodes A factory plant with a router and two servers, plant-1 and plant-2, linked by Direct Connect or a VPN to a VPC in us-east-1. The VPC has a transit gateway, the EKS ENIs of the private endpoint, a route table, the cluster security group and a cloud node. The EKS control plane holds the API server and access entries; IAM Roles Anywhere issues the nodes' credentials. The walkthrough adds remote networks, joins the nodes, installs Cilium, advertises Pod CIDRs with BGP and pins vision Pods to the plant. FACTORY PLANT · 10.80.1.0/24 Plant router 10.0.0.0/16 → Direct Connect plant-1 · 10.80.1.11 kubelet · containerd · from nodeadm plant-2 · 10.80.1.12 kubelet · containerd · from nodeadm vision-a 10.85.0.12 vision-c 10.85.0.13 vision-b 10.85.0.140 vision-guard 10.85.0.141:9443 Direct Connect or S2S VPN AWS REGION · us-east-1 EKS CONTROL PLANE · shop-prod API server remote networks: endpoint: private Access entries IAM Roles Anywhere trust: plant CA EKS API eks.us-east-1 DescribeCluster VPC 10.0.0.0/16 Transit gateway tgw-0a1b EKS ENIs 10.0.1.250 private endpoint VPC route table 10.0.0.0/16 → local Cluster security group node-1 · EC2 10.0.2.20 · Ready aws-node (VPC CNI) web 10.0.2.41 vision-c 10.0.2.57

    2Quiz to check understanding

    Check yourself