Cloud Architecture

Azure Private AKS Cluster with Application Gateway

Cloud Architecture diagram · made in Skemio

Architecture diagram showing traffic passing from User through Application Gateway WAF into private AKS worker nodes via AGIC ingress.
Architecture diagram showing traffic passing from User through Application Gateway WAF into private AKS worker nodes via AGIC ingress.

What it shows

  • Private AKS clusters assign private IPs to the control plane API server.
  • Application Gateway Ingress Controller (AGIC) handles WAF SSL offloading.
  • Worker node pods run inside custom subnets without public internet exposure.

The takeaway

Fronting private AKS with Azure Application Gateway gives you perimeter security without exposing cluster nodes.

More cloud architecture diagrams