Design and implement an ingress networking solution

[mischavandenburg]

The VM needs to be accessible from the internet as we are hosting public endpoints.

Investigate:

Do we need to use an Azure Load Balancer for this?

Or can we use the VM Public IP address?

When we use the VM Public IP address directly, we will need:

NSG's for the subnet that the VM is in to allow traffic to reach the Ingress Controller for k3s (Traefik)

[ams0]

My suggestion:

• stay away from built-in Traefik or any old-skool ingresses, and go with Envoy Gateway or Istio Ambient mode
• Even a single VM cluster can leverage Loadbalancer-type services if you deploy the Azure Cloud Controller Manager. Here's my sample repo (from a couple years back but I think still valid): https://github.com/ams0/k3s-azureccm

[mischavandenburg]

Thanks for the suggestion @ams0 !