Help Center/ Cloud Container Instance (CCI)/ User Guide/ Using CCI Through the Console/ Network Management/ Services/ Configuring Advanced Functions for Services Using Annotations
Updated on 2026-04-28 GMT+08:00
View PDF
Share

Configuring Advanced Functions for Services Using Annotations

By adding annotations in the YAML file, you can use some advanced functions provided by CCI. This section describes the available annotations when you create a LoadBalancer Service.

Table 1 Annotations

Annotation

Type

Description

kubernetes.io/elb.protocol-port

String

Layer 7 port of the Service

kubernetes.io/elb.cert-id

String

Server certificate ID

kubernetes.io/elb.tls-certificate-ids

String

SNI certificate IDs

kubernetes.io/elb.tls-ciphers-policy

String

TLS version

kubernetes.io/elb.http2-enable

String

Whether to enable HTTP/2

kubernetes.io/elb.security-pool-protocol

String

Whether HTTPS is used

kubernetes.io/elb.x-forwarded-port

String

If this option is enabled, the port used by the listener will be transmitted to backend servers through the X-Forwarded-Port header.

kubernetes.io/elb.x-forwarded-for-port

String

If this option is enabled, the port used by the client will be transmitted to backend servers through the X-Forwarded-For-Port header.

kubernetes.io/elb.x-forwarded-host

String

If this option is enabled, the Host header in the client request will be rewritten into the X-Forwarded-Host header and transmitted to the backend servers. If this option is disabled, the X-Forwarded-Host header in the client request will be transmitted to the backend servers.

kubernetes.io/elb.gzip-enabled

String

Whether to enable gzip for the listener

kubernetes.io/elb.acl-id

String

IP address group ID

kubernetes.io/elb.acl-type

String

IP address group type (blocklist or trustlist)

kubernetes.io/elb.class

String

The value must be elb.

kubernetes.io/elb.l4-keepalive-timeout

String

Idle timeout duration of a Layer 4 listener. If no requests reach the load balancer within the idle timeout period, the load balancer will terminate the existing connection with the client. A new connection will be established when the next request arrives.

Options:

  • For TCP listeners, the value is an integer from 10 to 4,000, in seconds. The default value is 300.
  • For UDP listeners (supported only by dedicated load balancers), the value is an integer from 10 to 4,000, in seconds. The default value is 300.

kubernetes.io/elb.l7-keepalive-timeout

String

Idle timeout duration of a Layer 7 listener. If no requests reach the load balancer within the idle timeout period, the load balancer will terminate the existing connection with the client. A new connection will be established when the next request arrives.

Options:

For HTTP and HTTPS (including TERMINATED_HTTPS) listeners, the value is an integer from 0 to 4,000, in seconds. The default value is 60.
Parent Topic: Services