OnPremise ARC enabled Kubernetes Cluster, POD communication

Question

Hi, I'm planning an ARC enabled On-Premise Kubernetes cluster and am now wondering whether this will enable communication for the PODS between the On-Premise ARC-Kubernetes and an AKS.
Goal is to have eg a Database hostet on the AKS and a Client, running on an On-Premise Kubernetes Cluster should have access to the Database, no public connection is allowed for this :-(

Is the ARC client and its options sufficient for this or do I also have to set up a VPN connection or an express route?

Thanks!

Answer 1

Hello @Berger-Williams, Juergen

Thank you for reaching out to the Microsoft Q&A platform.

The short answer is yes, you might need more than just the ARC client.

Diving into the intricacies of networking, while Azure Arc helps you manage and run Kubernetes clusters across on-premises, multi-cloud, and edge environments, communication between clusters typically involves networking considerations. For secure, private communication between your on-premises cluster and AKS, a VPN connection or Azure ExpressRoute might be necessary.

You'll want to establish a secure and private connection to ensure that your database hosted on AKS is accessible only to your on-premises cluster. The specifics depend on your network architecture and security requirements. VPNs are more straightforward for smaller setups, while ExpressRoute offers dedicated, high-throughput connections for larger, enterprise-level deployments.

In essence, think of Azure Arc as the orchestrator, but the actual communication between clusters often requires additional networking configurations.

For example, to enable communication between the two clusters, you can use Azure Arc Data Controller to create a secure connection between the on-premises Kubernetes cluster and the AKS cluster. Azure Arc Data Controller provides a secure and scalable way to manage and access data across hybrid and multi-cloud environments.

References

Hope that helps steer you in the right direction!

Please click "Accept as answer" if this helps.