Skip to content

Commit c907710

Browse files
authored
Update concepts-network.md
Review of August comments
1 parent c35ca26 commit c907710

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

articles/aks/concepts-network.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ The following ServiceTypes are available:
6262

6363
![Diagram showing Load Balancer traffic flow in an AKS cluster][aks-loadbalancer]
6464

65-
For HTTP load balancing functionalities of the inbound traffic, you may instead use an [Ingress controller](#ingress-controllers).
65+
For HTTP load balancing of inbound traffic, another option is to use an [Ingress controller](#ingress-controllers).
6666

6767
* **ExternalName**
6868

@@ -100,13 +100,13 @@ Nodes use the kubenet Kubernetes plugin. You can let the Azure platform create a
100100
Only the nodes receive a routable IP address. The pods use NAT to communicate with other resources outside the AKS cluster. This approach reduces the number of IP addresses you need to reserve in your network space for pods to use.
101101

102102
> [!NOTE]
103-
> kubenet networking, although still available in AKS, is not anymore the recommeneded configuration for production environemnts, because Azure CNI offers superior scalability and performance.
103+
> While kubenet is the default networking option for an AKS cluster to create a virtual network and subnet, it isn't recommended for production deployments. For most production deployments, you should plan for and use Azure CNI networking due to its superior scalability and performance characteristics.
104104
105105
For more information, see [Configure kubenet networking for an AKS cluster][aks-configure-kubenet-networking].
106106

107107
### Azure CNI (advanced) networking
108108

109-
With Azure CNI, every pod gets an IP address from the subnet and can be accessed directly. These IP addresses must be planned in advance and unique across your network space. Each node has a configuration parameter for the maximum number of pods it supports. The equivalent number of IP addresses per node are then reserved up front. This approach can lead to IP address exhaustion or the need to rebuild clusters in a larger subnet as your application demands grow, so it's important to plan properly. To mitigate these planning challenges is also possible to enable the feature [Azure CNI networking for dynamic allocation of IPs and enhanced subnet support][configure-azure-cni-dynamic-ip-allocation].
109+
With Azure CNI, every pod gets an IP address from the subnet and can be accessed directly. These IP addresses must be planned in advance and unique across your network space. Each node has a configuration parameter for the maximum number of pods it supports. The equivalent number of IP addresses per node are then reserved up front. This approach can lead to IP address exhaustion or the need to rebuild clusters in a larger subnet as your application demands grow, so it's important to plan properly. To avoid these planning challenges, it is possible to enable the feature [Azure CNI networking for dynamic allocation of IPs and enhanced subnet support][configure-azure-cni-dynamic-ip-allocation].
110110

111111
Unlike kubenet, traffic to endpoints in the same virtual network isn't NAT'd to the node's primary IP. The source address for traffic inside the virtual network is the pod IP. Traffic that's external to the virtual network still NATs to the node's primary IP.
112112

@@ -272,6 +272,7 @@ For more information on core Kubernetes and AKS concepts, see the following arti
272272
[aks-concepts-storage]: concepts-storage.md
273273
[aks-concepts-identity]: concepts-identity.md
274274
[agic-overview]: ../application-gateway/ingress-controller-overview.md
275+
[configure-azure-cni-dynamic-ip-allocation]: configure-azure-cni-dynamic-ip-allocation.md
275276
[use-network-policies]: use-network-policies.md
276277
[operator-best-practices-network]: operator-best-practices-network.md
277278
[support-policies]: support-policies.md

0 commit comments

Comments
 (0)