2V0-71.23 Question 321
Select 3As part of a Tanzu Kubernetes deployment, your organization has decided to use NSX Advanced Load Balancer (NSX ALB) to manage ingress traffic for multiple Kubernetes clusters. The operations team is tasked with configuring NSX ALB to enable seamless traffic routing to the workloads running in these clusters. Which of the following configurations must be performed to achieve this?
- A
Create a Virtual Service in NSX ALB to define the ingress traffic rules and backend pool.
- B
Configure an IPAM profile in NSX ALB to automatically allocate IP addresses for Virtual Services.
- C
Manually configure each backend pod IP address in NSX ALB to ensure proper traffic routing.
- D
Integrate NSX ALB with Kubernetes using an appropriate AKO (Avi Kubernetes Operator) configuration.
- E
Configure BGP routing between NSX ALB and the Kubernetes cluster network.
Show answer and explanation
Correct answers: A, B, D
Explanation
To use NSX Advanced Load Balancer for managing ingress in Tanzu Kubernetes clusters, you need to create Virtual Services, configure IPAM for automatic IP allocation, and integrate with Kubernetes using AKO. These steps ensure that NSX ALB can dynamically discover services and endpoints, assign IPs, and route traffic efficiently. Manual configuration of pod IPs and BGP routing are unnecessary for this specific use case.
- A. Correct.
Correct: A Virtual Service must be created in NSX ALB to define how ingress traffic is routed to backend services. This is a key component in enabling NSX ALB to handle ingress for Kubernetes workloads.
- B. Correct.
Correct: An IPAM profile is required to automatically assign IP addresses for Virtual Services, ensuring scalability and reducing manual intervention.
- C. Incorrect.
Incorrect: NSX ALB, when integrated with Kubernetes via AKO, dynamically discovers backend pods and services. There is no need for manual configuration of individual pod IPs.
- D. Correct.
Correct: AKO (Avi Kubernetes Operator) is essential for integrating NSX ALB with Kubernetes. It enables NSX ALB to dynamically discover services and endpoints in the Kubernetes clusters.
- E. Incorrect.
Incorrect: BGP routing is not a required configuration for NSX ALB to manage ingress traffic in Kubernetes clusters. NSX ALB can operate without relying on BGP for this use case.