检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
If there are no NAT gateways, CCE Autopilot automatically creates a NAT gateway with default specifications, binds an EIP to the NAT gateway, and configures SNAT rules. The NAT gateway will be billed. For details, see NAT Gateway Billing.
Optimized the function of creating a NAT gateway by default during cluster creation so that applications can access the public network. Fixed some security issues. v1.27.3-r10 v1.27.4 Supported cluster v1.27.
Optimized the function of creating a NAT gateway by default during cluster creation so that applications can access the public network. Fixed some security issues. v1.27.3-r10 v1.27.4 Supported cluster v1.27.
Next Hop: Select the NAT gateway configured for the subnet. Click OK. Parent Topic: Workload Exceptions
Figure 3 Buying a NAT gateway Configure an SNAT rule and bind the EIP to the subnet. For details, see Adding an SNAT Rule. Log in to the NAT Gateway console. On the displayed page, click the name of the NAT gateway for which you want to add the SNAT rule.
Typical Application Scenarios Type Typical Application Scenarios Nginx Ingress Standard configurations Extensive gateway customization Canary release and blue-green deployment of cloud native applications LoadBalancer Ingress Fully managed, highly available gateway, and no O&M required
*:* - × √ Performing all operations on NAT Gateway resources nat:*:get - √ √ Viewing NAT Gateway resource details nat:*:list - √ √ Listing all NAT Gateway resources vpcep:*:* - × √ Performing all operations on VPC Endpoint resources ecs:*:* - √ √ Performing all operations on ECSs
Calling Kubernetes APIs Through API Gateway You can call Kubernetes-native APIs through API Gateway using the URL in the format of https://{clusterid}.Endpoint/uri.
Otherwise, the system automatically creates a NAT gateway of the default specifications, binds an EIP to the NAT gateway, and configures SNAT rules. enableSWRImageAccess No Boolean Whether a cluster is interconnected with SWR.
Otherwise, the system automatically creates a NAT gateway of the default specifications, binds an EIP to the NAT gateway, and configures SNAT rules. enableSWRImageAccess Boolean Whether a cluster is interconnected with SWR.
Otherwise, the system automatically creates a NAT gateway of the default specifications, binds an EIP to the NAT gateway, and configures SNAT rules. enableSWRImageAccess Boolean Whether a cluster is interconnected with SWR.
Otherwise, the system automatically creates a NAT gateway of the default specifications, binds an EIP to the NAT gateway, and configures SNAT rules. enableSWRImageAccess Boolean Whether a cluster is interconnected with SWR.
By default, the resources (such as VPC endpoints, NAT gateways, and EIPs specified in the SNAT rules) created in the VPC of the cluster are retained. Ensure that the resources are not reused by other clusters or Services and delete them on the Network Console.
Otherwise, the system automatically creates a NAT gateway of the default specifications, binds an EIP to the NAT gateway, and configures SNAT rules. enableSWRImageAccess Boolean Whether a cluster is interconnected with SWR.
NAT Gateway Used when SNAT is configured for the cluster. A NAT gateway is automatically created and billed on a pay-per-use basis. Billing factor: NAT gateway specifications For details, see Billing.
/18 15:30:00 ~ 2023/04/19 21:06:00 Pay-per-use 773.6 hours (33 days, including March 18 and April 19) 5-GB public network traffic Cluster management: $0.1 USD/hour (AP-Bangkok) VPC endpoints: VPC endpoint for API Server: $0.014 USD/hour VPC endpoint for SWR: $0.014 USD/hour SNAT NAT
Gateway resources x √ √ Viewing NAT Gateway resource details √ √ √ Listing all NAT Gateway resources √ √ √ Performing all operations on VPC Endpoint resources x √ √ Viewing VPC Endpoint resource details √ √ √ Listing all VPC Endpoint resources √ √ √ Performing all operations on EVS
In addition, compared with the container tunnel network and VPC network, Cloud Native Network 2.0 does not require container tunnel encapsulation and NAT, and provides higher network performance.
Accessing the internet: You can bind an EIP to the pod by referring to Configuring an EIP for a Pod, or configure SNAT rules for NAT gateway by referring to Accessing the Public Network from a Container. Figure 3 Network access diagram Parent Topic: Network
The server acting as a gateway or proxy receives an invalid response from a remote server. 503 ServiceUnavailable The requested service is invalid.
