Skip to content

Commit 5a89eea

Browse files
Update errors-arfter-restricting-egress-traffic.md
Add additional explanation, scenarios in the Note in Solution part.
1 parent 94826bc commit 5a89eea

1 file changed

Lines changed: 5 additions & 3 deletions

File tree

support/azure/azure-kubernetes/connectivity/errors-arfter-restricting-egress-traffic.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
22
title: Errors after restricting egress traffic
33
description: Troubleshoot errors that occur after you restrict egress traffic from an Azure Kubernetes Service (AKS) cluster.
4-
ms.date: 11/12/2024
5-
ms.reviewer: chiragpa, nickoman, v-leedennis
4+
ms.date: 03/20/2025
5+
ms.reviewer: chiragpa, nickoman, jaewonpark, v-leedennis
66
ms.service: azure-kubernetes-service
77
keywords:
88
#Customer intent: As an Azure Kubernetes user, I want to troubleshoot errors that occur after I restrict egress traffic so that I can access my AKS cluster successfully.
@@ -29,8 +29,10 @@ Verify that your configuration doesn't conflict with any of the [required Outbou
2929
- Fully qualified domain names (FQDNs)
3030
- Application rules
3131

32+
Check out the NSG, firewall, or appliance that AKS traffic passes according to the configuration.
33+
3234
> [!NOTE]
33-
> The AKS outbound dependencies are almost entirely defined by using FQDNs. These FQDNs don't have static addresses behind them. The lack of static addresses means that you can't use network security groups (NSGs) to restrict outbound traffic from an AKS cluster.
35+
> The AKS outbound dependencies are almost entirely defined by using FQDNs. These FQDNs don't have static addresses behind them. The lack of static addresses means that you can't use network security groups (NSGs) to restrict outbound traffic from an AKS cluster. In addition, scenarios that only allow IPs obtained from required FQDNs after all deny in NSG are not enough. Since the IPs are not static, issues may occur later.
3436
3537
## More information
3638

0 commit comments

Comments
 (0)