Traffic to AKS ingress is blocked when using domain name

Dainius Figoras 0

Hi,

few weeks ago I created new kubernetes cluster, installed ingress-nginx and some test application. Plan was to test some basic setup and then install letsencrypt for https.

I tried 2 setups for ingress, with host name and without. Both works fine if I do port-forward to service or ingress controller.

it also works if I don't use host in ingress definition and use IP address to send request. I also can add host header to http request and it works just fine.

But if I setup ingress with host it seems like ingress controller is not getting traffic at all, when I try from outside cluster. I also tried with https seems like same result, all requests are just timing out.

There is no firewall and I couldn't find any network config that would block by domain. I am not even sure if it's something inside kubernetes or is it loadbalancer that does this.

I never experienced this before with any other setup, but last time I did it, it was few years ago, so maybe something in new version?

Dainius Figoras 0 Reputation points

2024-09-01T09:00:14.2166667+00:00
after manually editing nginx.conf in controller and return 200 for default server (when ingress is configured to use it's own host), it seems that it's mainly nginx problem - when there is host it doesn't use that, but redirects everything to default server.

ingress file have just simple rule for host like this

rules: - host: api.dev.tech.dev http: paths: - path: / pathType: Prefix

what am I missing?
anashetty 660 Reputation points Microsoft Vendor

2024-09-02T12:50:07.7433333+00:00

Hi Dainius Figoras,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Just checking in to see if the below answer provided by akinbade abiola helped.

If this answers your query, do click Accept Answer and Upvote for was this answer helpful. And, if you have any further query, please do let us know.

1 answer

akinbade abiola 18,305 Reputation points

2024-09-02T04:02:12.94+00:00

May be a dns issue:

use dig or nslookup to verify that your domain name resolves to the correct IP address.

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola
Please sign in to rate this answer.
Dainius Figoras 0 Reputation points

2024-09-02T13:45:47.8833333+00:00

it points to right IP address and with just default server it have no problem to answer on port 80 from service/pod. It's only when I add host name, so nginx use separate server in config, that it stops to responding.

And it seems if I move default server ("_") configuration after me custom domain, it starts to work. But that feels very strange, so I guess there is something else involved and it's not really a solution, because every time I change ingress, it overwrites.

Nikhil Duserla 2,825 Reputation points Microsoft Vendor

2024-09-03T10:13:52.74+00:00

Hi Dainius Figoras,

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Based on your issue, I have shared troubleshooting steps that I felt will help resolve the issue you reported.

The ingress controller may not be configured to handle hostname-based routing. Check the ingress controller configuration to ensure that it is set up to handle hostname-based routing.

Please refer this document: Ingress in Azure Kubernetes Service (AKS)

Ensure that you have added DNS > Records > DNS Management > Add Records

Select Type: A

Set Name to secure

Set IP address to Ingress Controller IP address

If you're making requests to the ingress host name or IP address and don’t see any entries in the logs of the ingress controller pod, it's possible that the requests aren't actually reaching the cluster. This could result in a "Connection Timed Out" error message for you.

If you see a "Connection Timed Out" error, it might be because your network settings are blocking the connection.

Look at the settings for your network security group, which controls the traffic to your AKS nodes (the machines running your application).

Make sure the subnet where your AKS nodes are located isn't blocking traffic coming from the load balancer or application gateway.

For more information about how to troubleshoot ingress (such as Nginx Ingress), see ingress-nginx troubleshooting.

We noticed that you rated an answer as not helpful. I have provided an answer with the relevant details to make this a positive experience for you.

If you have any further queries, do let us know.

Nikhil Duserla 2,825 Reputation points Microsoft Vendor

2024-09-04T15:48:27.6733333+00:00

Hi Dainius Figoras,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet.

Thank you.

Nikhil Duserla 2,825 Reputation points Microsoft Vendor

2024-09-05T09:31:20.0666667+00:00

Hi Dainius Figoras,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet.

Thank you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Traffic to AKS ingress is blocked when using domain name

1 answer

Your answer