https://droyuki.github.io/en/tags/eks/eks - Tag - weichen's noteHugo -- gohugo.ioendroyuki@gmail.com (weichen)droyuki@gmail.com (weichen)Sat, 10 Jun 2023 12:06:35 +0800https://droyuki.github.io/en/2023/06/eks-nodegroup-in-private-snet/Sat, 10 Jun 2023 12:06:35 +0800weichenhttps://droyuki.github.io/en/2023/06/eks-nodegroup-in-private-snet/Background Since the company-assigned VPC is an Intranet segment, used for interfacing with the local end, from the organization’s perspective, the VPC is not truly ‘Private’, therefore the IP quantity is still limited. Following the discovery that EKS Pods occupy ENIs, in order to solve this issue, I added another set of Private IP associated with the VPC, then performed a layer of translation via a Private NAT Gateway. This enables all EKS Pods to communicate with the local network segment through the same Intranet IP, achieving the goal of saving IP resources.