EKS Ingress Nginx负载平衡器与WAF集成

Question

我已经在AWS EKS集群上部署了Ingress Nginx。入口控制器和服务作为组件部署。因此，为Ingress Nginx控制器提供了AWS网络负载平衡器

apiVersion: v1
kind: Service
metadata:
  annotations:
    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
    service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: 'true'
    service.beta.kubernetes.io/aws-load-balancer-type: nlb
    service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
  labels:
    helm.sh/chart: ingress-nginx-3.36.0-external
    app.kubernetes.io/name: ingress-nginx-external
    app.kubernetes.io/instance: ingress-nginx-external
    app.kubernetes.io/version: 0.49.0-external
    app.kubernetes.io/managed-by: Helm-external
    app.kubernetes.io/component: controller-external
  name: ingress-nginx-controller-external
  namespace: ingress-nginx
spec:
  type: LoadBalancer
  externalTrafficPolicy: Local
  ports:
    - name: http
      port: 80
      protocol: TCP
      targetPort: 80
    - name: https
      port: 443
      protocol: TCP
      targetPort: 443
  selector:
    app.kubernetes.io/name: ingress-nginx-external
    app.kubernetes.io/instance: ingress-nginx-external
    app.kubernetes.io/component: controller-external

流量通过入口控制器终止的NLB和TLS。

我想做的是将AWS WAF与入口集成。AWS ALB有一种方法，但是否有方法集成上述配置的WAF？

Answer 1

目前，您无法将NLB目标类型设置为“alb”。您可以手动设置NLB并在其后面添加ALB；并将WAF与添加的ALB关联。