how to access Azure AKS service with a private IP (from an application which is also running in same VNET) , dont want to expose this service with Public IP

Question

how to access Azure AKS service with a private IP (from an application which is also running in same VNET) , dont want to expose this service with Public IP

Ashley Alex 96

how can i access my AKS Services (say servicexyz) with private IPs , from my applications which are running in same VNET of the AKS cluster. Don't want to expose this service with Public IP.
Azure CNI networking.

singhh-msft 2,431 Reputation points

2021-03-08T13:41:49.633+00:00
@Ashley Alex , thank you for reaching out to us. Happy to help.

There are several options for establishing network connectivity to the private cluster:

Create a VM in the same Azure Virtual Network (VNet) as the AKS cluster.

Use a VM in a separate network and set up Virtual network peering. See the section below for more information on this option.

Use an Express Route or VPN connection.

Creating a VM in the same VNET as the AKS cluster is the easiest option. Express Route and VPNs add costs and require additional networking complexity. Virtual network peering requires you to plan your network CIDR ranges to ensure there are no overlapping ranges.

Let me know if this answers your query.

Accepted answer

3 additional answers

Your answer

singhh-msft 2,431 Reputation points

2021-03-08T13:41:49.633+00:00

@Ashley Alex , thank you for reaching out to us. Happy to help.

There are several options for establishing network connectivity to the private cluster:

Create a VM in the same Azure Virtual Network (VNet) as the AKS cluster.

Use a VM in a separate network and set up Virtual network peering. See the section below for more information on this option.

Use an Express Route or VPN connection.

Creating a VM in the same VNET as the AKS cluster is the easiest option. Express Route and VPNs add costs and require additional networking complexity. Virtual network peering requires you to plan your network CIDR ranges to ensure there are no overlapping ranges.

Let me know if this answers your query.

Answer 1

Ashley Alex 96

yes please close , please see below is the answer to the query
Use an internal load balancer with Azure Kubernetes Service (AKS)
https://learn.microsoft.com/en-us/azure/aks/internal-lb

Answer 2

Ashley Alex 96

yeah i understood, my question is what kind of "service" need to create in AKS to get a private IP for a service which can be accessible outside the cluster.

singhh-msft 2,431 Reputation points

2021-03-08T14:19:22.593+00:00

Sorry about that, but can you please explain your question using an example?

singhh-msft 2,431

If you want to know, how to create a private AKS cluster, you can do so by using below Azure CLI command:

az aks create \  
    --resource-group <private-cluster-resource-group> \  
    --name <private-cluster-name> \  
    --load-balancer-sku standard \  
    --enable-private-cluster \  
    --network-plugin azure \  
    --vnet-subnet-id <subnet-id> \  
    --docker-bridge-address 172.17.0.1/16 \  
    --dns-service-ip 10.2.0.10 \  
    --service-cidr 10.2.0.0/24

Please check out Create a private Azure Kubernetes Service cluster for more info on this.

singhh-msft 2,431 Reputation points

2021-03-09T05:39:21.217+00:00

@Ashley Alex , just checking in to see if the previous comments helped you.

Answer 3

Ashley Alex 96

Thanks Harshita, not exactly but i will figure it out , thank you

singhh-msft 2,431 Reputation points

2021-03-09T09:12:39.873+00:00

We are here to help. If you need anything else, pls let me know. Consequently, if the above responses helped your query, I will post them as an answer to help other community members. Let me know.

Answer 4

Ashley Alex 96

Sure , no the above answers didnt help. Thank you.

singhh-msft 2,431 Reputation points

2021-03-09T09:15:23.747+00:00

Can you let us know if we can help you with anything else or is this thread good to close?

Share via

how to access Azure AKS service with a private IP (from an application which is also running in same VNET) , dont want to expose this service with Public IP

3 additional answers

Your answer