Network Access Overview

Workloads can be accesses over a private or public network, and they can also access the public network.

Private Network Access: Access to intranet resources.
- Service: allows workloads in a namespace to access each other.
- ELB (private network load balancer): allows a workload and other cloud resources (such as ECSs) in the same VPC to access each other. You can also use this method when you want workloads in the same VPC but different namespaces to access each other. The workload can be accessed using Private domain name or Load balancer's IP address:Port over HTTP/HTTPS and TCP/UDP. If other resources are in a VPC different from the workload, you can also create a VPC peering connection to enable communication between VPCs.
Public Network Access: A workload can be accessed from public networks through a load balancer. The load balancer must be in the same VPC as the workload.
Accessing Public Networks from a Container: Containers can access public networks by using SNAT rules, which are configured on the NAT Gateway.