Pattern 1: Kubelet → EKS Control Plane

Pattern 1: Kubelet → EKS Control Plane A sequence diagram generated by Archify. DNS lookup for API server endpoint endpoint IP HTTPS request (TCP 443) routed to the public internet reaches public endpoint (HTTPS) HTTPS response 10.0.0.0/16 [static] via Gateway static route in the on-prem routing table crosses cloud boundary via VPN / DX 10.0.0.0/16 [local] → ENI forwarded to API server HTTPS response ① Request start — DNS lookup, then HTTPS request ② → ③ Public endpoint route (public access mode) Private endpoint route (private access mode) Kubelet · Node 10.80.0.2 · Sequence participant Kubelet Node 10.80.0.2 DNS · endpoint lookup · Sequence participant DNS endpoint lookup Router · on-premises · Sequence participant Router on-premises Gateway · VPN / DX · Sequence participant Gateway VPN / DX Internet · public internet · Sequence participant Internet public internet VPC Router · VPC 10.0.0.0/16 · Sequence participant VPC Router VPC 10.0.0.0/16 CP ENI · 10.0.0.132 · Sequence participant CP ENI 10.0.0.132 EKS CP · API server · Sequence participant EKS CP API server Legend Main path Response Regular call

On-premises routing table

  • • 10.80.0.0/16 [local] via eth0 (CONNECTED)
  • • 10.0.0.0/16 [static] via Gateway (STATIC)
  • • 10.85.1.0/24 [dynamic] via 10.80.0.2 · 10.85.2.0/24 [dynamic] via 10.80.0.3

Cluster VPC routing table

  • • 10.0.0.0/16 [local]
  • • 10.80.0.0/16 [static] via Gateway (Remote Node CIDR)
  • • 10.85.0.0/16 [static] via Gateway (Remote Pod CIDR)