Can AKS be used fully on-premise and without internet connection?

Andrew 20 Reputation points
2023-10-09T09:34:47.5933333+00:00

As in title.

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,883 questions
0 comments No comments
{count} votes

Accepted answer
  1. mutaz-msft 2,266 Reputation points Microsoft Employee
    2023-10-09T11:43:19.68+00:00

    Hi Andrew,

    By default, AKS clusters have unrestricted outbound internet access. This level of network access allows nodes and services you run to access external resources as needed. If you wish to restrict egress traffic, a limited number of ports and addresses must be accessible to maintain healthy cluster maintenance tasks. The simplest solution to securing outbound addresses is using a firewall device that can control outbound traffic based on domain names. Azure Firewall can restrict outbound HTTP and HTTPS traffic based on the FQDN of the destination. You can also configure your preferred firewall and security rules to allow these required ports and addresses.

    Reference: https://learn.microsoft.com/en-us/azure/aks/outbound-rules-control-egress


0 additional answers

Sort by: Most helpful