Skip to content

Commit aec8f4e

Browse files
committed
Updates for formatting
1 parent a79f7ab commit aec8f4e

File tree

1 file changed

+23
-22
lines changed

1 file changed

+23
-22
lines changed

articles/aks/configure-azure-cni-static-block-allocation.md

Lines changed: 23 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.author: allensu
77
ms.service: azure-kubernetes-service
88
ms.subservice: aks-networking
99
ms.topic: article
10-
ms.date: 03/14/2024
10+
ms.date: 03/18/2024
1111
ms.custom: references_regions, devx-track-azurecli
1212
---
1313

@@ -18,11 +18,11 @@ The new static block allocation capability in Azure CNI solves this problem by a
1818

1919
It offers the following benefits:
2020

21-
* **Better IP Scalability**: CIDR blocks are statically allocated to the cluster nodes and are present for the lifetime of the node, as opposed to the traditional dynamic allocation of individual IPs with traditional CNI. This enables routing based on CIDR blocks and helps scale the cluster limit up to 1 million pods from the traditional 65K pods per cluster. Your Azure Virtual Network must be large enough to accommodate the scale of your cluster.
22-
* **Flexibility**: Node and pod subnets can be scaled independently. A single pod subnet can be shared across multiple node pools of a cluster or across multiple AKS clusters deployed in the same VNet. You can also configure a separate pod subnet for a node pool.
23-
* **High performance**: Since pods are assigned virtual network IPs, they have direct connectivity to other cluster pods and resources in the VNet.
24-
* **Separate VNet policies for pods**: Since pods have a separate subnet, you can configure separate VNet policies for them that are different from node policies. This enables many useful scenarios such as allowing internet connectivity only for pods and not for nodes, fixing the source IP for pod in a node pool using an Azure NAT Gateway, and using NSGs to filter traffic between node pools.
25-
* **Kubernetes network policies**: Cilium, Azure NPM, and Calico work with this new solution.
21+
- **Better IP Scalability**: CIDR blocks are statically allocated to the cluster nodes and are present for the lifetime of the node, as opposed to the traditional dynamic allocation of individual IPs with traditional CNI. This enables routing based on CIDR blocks and helps scale the cluster limit up to 1 million pods from the traditional 65K pods per cluster. Your Azure Virtual Network must be large enough to accommodate the scale of your cluster.
22+
- **Flexibility**: Node and pod subnets can be scaled independently. A single pod subnet can be shared across multiple node pools of a cluster or across multiple AKS clusters deployed in the same VNet. You can also configure a separate pod subnet for a node pool.
23+
- **High performance**: Since pods are assigned virtual network IPs, they have direct connectivity to other cluster pods and resources in the VNet.
24+
- **Separate VNet policies for pods**: Since pods have a separate subnet, you can configure separate VNet policies for them that are different from node policies. This enables many useful scenarios such as allowing internet connectivity only for pods and not for nodes, fixing the source IP for pod in a node pool using an Azure NAT Gateway, and using NSGs to filter traffic between node pools.
25+
- **Kubernetes network policies**: Cilium, Azure NPM, and Calico work with this new solution.
2626

2727
This article shows you how to use Azure CNI Networking for static allocation of CIDRs and enhanced subnet support in AKS.
2828

@@ -31,12 +31,13 @@ This article shows you how to use Azure CNI Networking for static allocation of
3131
> [!NOTE]
3232
> When using static block allocation of CIDRs, exposing an application as a Private Link Service using a Kubernetes Load Balancer Service isn't supported.
3333
34-
* Review the [prerequisites][azure-cni-prereq] for configuring basic Azure CNI networking in AKS, as the same prerequisites apply to this article.
35-
* Review the [deployment parameters][azure-cni-deployment-parameters] for configuring basic Azure CNI networking in AKS, as the same parameters apply.
36-
* AKS Engine and DIY clusters aren't supported.
37-
* Azure CLI version `2.37.0` or later with extension aks-preview of version '2.0.0b2' or later
38-
* If you have an existing cluster, you need to enable Container Insights for monitoring IP subnet usage. You can enable Container Insights using the [`az aks enable-addons`][az-aks-enable-addons] command, as shown in the following example:
39-
* Register the subscription-level feature flag for your subscription: 'Microsoft.ContainerService/AzureVnetScalePreview'
34+
- Review the [prerequisites][azure-cni-prereq] for configuring basic Azure CNI networking in AKS, as the same prerequisites apply to this article.
35+
- Review the [deployment parameters][azure-cni-deployment-parameters] for configuring basic Azure CNI networking in AKS, as the same parameters apply.
36+
- AKS Engine and DIY clusters aren't supported.
37+
- Azure CLI version `2.37.0` or later with extension aks-preview of version '2.0.0b2' or later
38+
- If you have an existing cluster, you need to enable Container Insights for monitoring IP subnet usage. You can enable Container Insights using the [`az aks enable-addons`][az-aks-enable-addons] command, as shown in the following example:
39+
- Register the subscription-level feature flag for your subscription: 'Microsoft.ContainerService/AzureVnetScalePreview'
40+
4041
```azurecli-interactive
4142
az aks enable-addons --addons monitoring --name <cluster-name> --resource-group <resource-group-name>
4243
```
@@ -86,9 +87,9 @@ The planning of IPs for Kubernetes services remain unchanged.
8687
8788
The [deployment parameters][azure-cni-deployment-parameters]for configuring basic Azure CNI networking in AKS are all valid, with two exceptions:
8889
89-
* The **vnet subnet id** parameter now refers to the subnet related to the cluster's nodes.
90-
* The parameter **pod subnet id** is used to specify the subnet whose IP addresses will be statically or dynamically allocated to pods in the node pool.
91-
* The **pod ip allocation mode** parameter specifies whether to use dynamic individual or static block allocation.
90+
- The **vnet subnet id** parameter now refers to the subnet related to the cluster's nodes.
91+
- The parameter **pod subnet id** is used to specify the subnet whose IP addresses will be statically or dynamically allocated to pods in the node pool.
92+
- The **pod ip allocation mode** parameter specifies whether to use dynamic individual or static block allocation.
9293
9394
## Before you begin
9495
@@ -125,7 +126,7 @@ The [deployment parameters][azure-cni-deployment-parameters]for configuring basi
125126
az feature show --namespace "Microsoft.ContainerService" --name "AzureVnetScalePreview"
126127
```
127128
128-
3. When the status reflects *Registered*, refresh the registration of the *Microsoft.ContainerService* resource provider using the [`az provider register`][az-provider-register] command.
129+
3. When the status reflects *Registered*, refresh the registration of the _Microsoft.ContainerService_ resource provider using the [`az provider register`][az-provider-register] command.
129130
130131
```azurecli-interactive
131132
az provider register --namespace Microsoft.ContainerService
@@ -187,25 +188,25 @@ az aks nodepool add --cluster-name $clusterName -g $resourceGroup -n newnodepoo
187188

188189
## Static allocation of CIDR blocks and enhanced subnet support FAQs
189190

190-
* **Can I assign multiple pod subnets to a cluster?**
191+
- **Can I assign multiple pod subnets to a cluster?**
191192

192193
Multiple subnets can be assigned to a cluster but only one subnet can be assigned to each node pool. Different node pools across the same/different cluster can share the same subnet.
193194

194-
* **Can I assign Pod subnets from a different VNet altogether?**
195+
- **Can I assign Pod subnets from a different VNet altogether?**
195196

196197
No, the pod subnet should be from the same VNet as the cluster.
197198

198-
* **Can some node pools in a cluster use Dynamic IP allocation while others use the new Static Block allocation?**
199+
- **Can some node pools in a cluster use Dynamic IP allocation while others use the new Static Block allocation?**
199200

200201
Yes, different node pools can use different allocation modes. However, once a subnet is used in one allocation mode it can only be used in the same allocation mode across all the node pools it is associated.
201202

202203
## Next steps
203204

204205
Learn more about networking in AKS in the following articles:
205206

206-
* [Use a static IP address with the Azure Kubernetes Service (AKS) load balancer](static-ip.md)
207-
* [Use an internal load balancer with Azure Kubernetes Service (AKS)](internal-lb.md)
208-
* [Use the application routing addon in Azure Kubernetes Service (AKS)](app-routing.md)
207+
- [Use a static IP address with the Azure Kubernetes Service (AKS) load balancer](static-ip.md)
208+
- [Use an internal load balancer with Azure Kubernetes Service (AKS)](internal-lb.md)
209+
- [Use the application routing addon in Azure Kubernetes Service (AKS)](app-routing.md)
209210

210211
<!-- LINKS - External -->
211212
[github]: https://raw.githubusercontent.com/microsoft/Docker-Provider/ci_prod/kubernetes/container-azm-ms-agentconfig.yaml

0 commit comments

Comments
 (0)