Troubleshooting Managed Service for Kubernetes pod access via Network Load Balancer
Issue description
You cannot get access to applications in the Managed Service for Kubernetes cluster via Network Load Balancer endpoints.
Solution
If you use a load balancer that is associated with a security group, you need to create a rule in this group allowing traffic from the load balancer to Managed Service for Kubernetes cluster nodes on ports in the range from 30000 to 32767.
When routing traffic, the load balancer only changes the destination port, while the original IP address of the query remains the same. Therefore, you should specify the 0.0.0.0/0 address range in the allow rule.
Learn more about NodePort type services in this official Kubernetes guide
If the issue persists
If the above actions did not help, create a support ticket
- Network Load Balancer ID.
- Managed Service for Kubernetes cluster ID.
- Information about pods running your applications that require network access via a load balancer, and the ports they receive traffic on.