Best practices

ACK cluster without ENI multiple IP mode support

Risk Level

Informational (4)

Compliance Frameworks


Alibaba Cloud Container Service for Kubernetes (ACK) is a managed service compatible with Kubernetes to help users manage their containerized applications. It was detected that the Kubernetes cluster {AliCloudAckCluster} doesn't support ENI. Terway plugin uses ENIs to assign IP addresses to containers. ENI can be associated with a maximum of five security groups, which helps control pod access and make it more scalable.
  • Recommended Mitigation

    It is recommended to use Terways network plugin which uses ENI multiple IP mode.