networking

Design AWS and Kubernetes networking patterns for VPC, Ingress, Istio, DNS, TLS, and PrivateLink.

Updated Mar 29, 2026
One-click install
npx skills add https://github.com/romankovsv/claude-code-python-devops-mlops --skill networking-romankovsv
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: networking
Source: https://github.com/romankovsv/claude-code-python-devops-mlops/tree/main/skills/networking
Command: npx skills add https://github.com/romankovsv/claude-code-python-devops-mlops --skill networking-romankovsv

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Network design and operational patterns for secure, scalable AWS and Kubernetes environments, covering VPC design, ingress options, service mesh, DNS, TLS, and private connectivity.

Core Features & Use Cases

  • VPC 3-tier design and subnet planning for multi-AZ deployments.
  • Ingress decisions between NGINX and AWS ALB, TLS automation with cert-manager.
  • Istio service mesh patterns, DNS with Route53, and PrivateLink connectivity.
  • Guidance for DNS, TLS, and private connectivity optimizations.

Quick Start

Configure a new AWS/VPC + Kubernetes cluster with Istio, cert-manager, and Route53 integration to implement secure, scalable networking.

Frequently Asked Questions about networking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a multi-AZ VPC architecture for an AWS and Kubernetes environment?

Design a 3-tier VPC architecture with multi-AZ subnet planning to establish secure, scalable network foundations for AWS and Kubernetes environments. This approach segments public, private, and database subnets across multiple availability zones for high availability.

What is the best way to choose between NGINX and ALB for Kubernetes Ingress?

Choosing between NGINX and AWS ALB for Kubernetes Ingress involves evaluating your specific traffic routing requirements and cloud integration needs. Both ingress options support TLS automation with cert-manager to secure application traffic.

How does Istio service mesh integrate with AWS Route53 and cert-manager for DNS and TLS?

Istio service mesh integrates with Route53 for DNS resolution and cert-manager for TLS automation to provide secure service-to-service communication. This configuration secures traffic routing and domain name resolution across the Kubernetes cluster.

Can I use Terraform to provision VPC infrastructure for a Kubernetes cluster with PrivateLink connectivity?

Yes, you can use Terraform or CloudFormation for VPC provisioning to establish PrivateLink connectivity across multi-AZ deployments. This infrastructure as code approach automates private network connectivity between AWS services and Kubernetes clusters.

When do I need a service mesh like Istio for my AWS and Kubernetes networking patterns?

You need a service mesh like Istio when managing complex microservices traffic routing, mTLS enforcement, and observability across multi-AZ Kubernetes deployments. It provides advanced traffic management capabilities that go beyond standard Kubernetes networking components.