EKS Load Balancers

Working with Load Balancers using AWS EKS

Creating an EKS Ingress

If you need to create an Ingress Load Balancer, refer to the EKS Ingress page in the DuploCloud Kubernetes User Guide.

Adding a Load Balancer Listener

For an end-to-end example of deploying an application using an EKS Service, see the AWS Quick Start Tutorial and choose the Creating an EKS Service option.

1. In the DuploCloud Portal, navigate Kubernetes -> Services.

2. On the Services page, select the Service name in the Name column.

3. Click the Load Balancers tab.

4. If no Load Balancers exist, click the Configure Load Balancer link. If other Load Balancers exist, click Add in the LB listeners card. The Add Load Balancer Listener pane displays.

5. From the Select Type list box, select a Load Balancer Listener type based on your Load Balancer.

6. Complete other fields as required and click Add to add the Load Balancer Listener.

   

   Add Load Balancer Listener pane

Adding a Network Load Balancer (NLB) Listener with a custom CIDR

To specify a custom classless inter-domain routing (CIDR) value for an NLB Load Balancer, edit the Load Balancer Listener configuration in the DuploCloud Portal.

Before completing this task, you must add a Load Balancer Listener of Type Network LB.

1. In the DuploCloud Portal, navigate to Kubernetes -> Services.

2. On the Services page, select the Service name in the Name column.

3. Click the Load Balancers tab.

4. In the LB Listeners area, select the Edit Icon () for the NLB Load Balancer you want to edit. The Edit Load Balancer Listener pane displays.

5. Click Add in the Custom CIDR field of the Edit Load Balancer Listener pane.

6. Add the Custom CIDR(s) and press ENTER. In the example below 10.180.12.0/22 and 10.180.8.0/22 are added. After the CIDRs are added, you add Security Groups for Custom CIDR(s).

Edit Load Balancer Listener pane with Custom CIDRs

Adding Security Groups for NLBs with custom CIDRs

Repeat this procedure for each custom CIDR that you want to add.

1. Navigate to Administrator -> Infrastructure. The Infrastructure page displays.

2. From the Name column, select the appropriate Infrastructure.

3. Click the Security Group Rules tab.

4. Click Add to add a Security Group. The Add Tenant Security pane displays.

5. From the Source Type list box, select Ip Address.

6. From the IP CIDR list box, select Custom. A field labeled CIDR notation of allowed hosts displays.

7. In the CIDR Notation of allowed hosts field enter a custom CIDR and complete the other required fields.

8. Click Add to add the Security Group containing the custom CIDR.

Repeat this procedure to add additional CIDRs.

Add Tenant Security pane for adding Custom CIDRs to Securty Groups

Adding a Shared Load Balancer

1. In the DuploCloud Portal, navigate to Cloud Services -> Networking.

2. Click the Load Balancer tab.

3. Click Add. The Create a Load Balancer pane displays.

   

   Create a Load Balancer pane for a shared Application load balancer
4. In the Name field, enter a name for the Load Balancer.

5. From the Type list box, select a Load Balancer type.

6. From the Visibility list box, select Public or Internal.

7. Click Create.

Creating a Target Group Only Load Balancer for multiple services

Instead of creating a unique Load Balancer for each Service you create, you can share a single Load Balancer between multiple Services. This is helpful when your applications run distributed microservices where the requests use multiple services and route traffic based on application URLs, which you can define with Load Balancer Listener Rules.

To accomplish this, you:

1. Create a Service Load Balancer with the type Target Group Only. This step creates a Service Load Balancer that includes a Target Group with a pre-defined name.

2. Create a Shared Load Balancer with the Target Group that was defined.

3. Create routing rules for the Shared Load Balancer and the Target Group it defines.

Creating a Service Load Balancer with the type Target Group Only

1. In the DuploCloud Portal, navigate Kubernetes -> Services.

2. On the Services page, select the Service name in the Name column.

3. Click the Load Balancers tab.

4. If no Load Balancers exist, click the Configure Load Balancer link. If other Load Balancers exist, click Add in the LB listeners card. The Add Load Balancer Listener pane displays.

5. From the Select Type list box, select Target Group Only.

6. You can create a Load Balancer Listener with a type of Target Group Only for Docker Mode or Native EKS and ECS Services based on your application requirement. Complete the other required fields and click Add.

7. Note the name of the created Target Group by clicking the Info Icon ( ) for the Load Balancer in the LB Listener card and searching for the string TgName. You will select the Target Group when you create a Shared Load Balancer for the Target Group.

   

   Add Load Balancer Listener pane for Target Group Only Type

The Target Group Only Service Load Balancer is displayed in the LB Listeners area in the Load Balancers tab on the Services page.

Load Balancers tab

Creating a Shared Load Balancer for the Target Group

Add a Shared Load Balancer before performing this procedure.

1. Navigate to Cloud Services -> Networking page.

2. Select the Load Balancer tab.

3. Select the Shared Load Balancer you created from the NAME column. The Load Balancer details page displays.

   

   Load Balancers page with Listeners tab
4. Select the Listeners tab, and click Add. The Load Balancer Listener pane displays.

   

   The Add Load Balancer Listener pane with Target Group specified
5. In the Port field, enter the port number for incoming traffic (e.g., 80 or 443).

6. In the Protocol list box, select the protocol to use (e.g., HTTP or HTTPS).

7. In the Action Type list box, select Forward to Target Group.

   • In the Forward Target Group list box, select the Target Group that was created when you added a Load Balancer with the Type Target Group Only in the previous step.

8. Click Save. The Shared Load Balancer for the Target Group displays in the Listeners tab.

   

   Shared Load Balancer for the Target Group

Adding Routing Rules to the Shared Load Balancer

Create a Shared Load Balancer for the Target Group before performing this procedure.

Rules are not supported for Network Load Balancers (NLBs).

1. Navigate to Cloud Services -> Networking page.

2. Select the Load Balancer tab.

3. Select the Shared Load Balancer you created from the NAME column. The Load Balancer details page displays.

4. Select the Listeners tab.

5. Click the menu icon ( ) next to the listener you want to add rules for, and select Manage Rules. The Listener Rules page displays.

   

   The Listeners tab on the Load Balancer details page w
6. Click Add. The Add LB Listener rule page displays.

   

   Add LB Listener rule page
7. Create routing rules for the Target Group by setting appropriate Conditions. Add Routing Rules by specifying Rule Type and Values. Specify the Forward Target Group and specify Priority for multiple rules.

   
8. Click Submit.

Viewing Shared Load Balancer rules

View the rules you defined for any Shared Load Balancer.

1. In the DuploCloud portal, navigate to Cloud Services -> Networking.

2. Select the Load Balancer tab.

3. From the Name column, select the Load Balancer whose rules you want to view.

4. In the Listeners tab, in the appropriate Target Group row, click the Actions menu ( ) and select Manage Rules.

   

   Listener Rules page displaying Shared Load Balancer rules

Updating Target Group attributes

Update attributes for your defined Target Group.

1. In the DuploCloud portal, navigate to Cloud Services -> Networking.

2. Select the Load Balancer tab.

3. From the Name column, select the Load Balancer whose defined Target Group attributes you want to modify.

4. In the Listeners tab, in the appropriate Target Group row, click the Actions menu ( ) and select Update Target Group attributes.

The LB Listener menu with the Update Target Group attributes option highlighted.

1. The Update Target Group Attributes pane displays.

The Update Target Group Attributes pane

1. Find the attribute you want to update in the Attribute column and update the associated value in the Value column.

2. Click Update to save the changes.

Updating Target Group Attributes to enable stickiness

To enable stickiness, complete steps 1-5 for Updating Target Group Attributes above. On the Update Target Group Attributes pane, in the Value field for stickiness.enabled, enter true. Update additional stickiness attributes, if needed. Click Update to save the changes.

The Update Target Group Attributes pane configured to enable stickiness.

Additional Load Balancer Settings

You can use the Other Settings card in the DuploCloud Portal to set the following features:

• WAF Web ACL

• Enable HTTP to HTTPS redirects

• Enable Access Logging

• Set Idle Timeout

• Drop invalid headers

• Delete Protection

1. In the DuploCloud Portal, navigate to Kubernetes -> Services. The Services page displays.

2. Select the Service to which your Load Balancer is attached from the NAME column.

3. Click the Load Balancers tab.

4. In the Other Settings card, click Edit.

   

   Load Balancers tab with Other Settings card
5. The Other Load Balancer Settings pane displays.

   

   The Other Load Balancer Settings pane
6. Configure the settings, as needed.

7. Click Save. The Load Balancer settings are updated.