http://elposhox.dev/en/tags/security/Recent content in Security on El PoshoXHugo -- gohugo.ioen© 2026 Az García ZúñigaWed, 01 Jul 2026 00:00:00 +0000http://elposhox.dev/en/posts/cloudfront-vpc-origin-waf-eks/Wed, 01 Jul 2026 00:00:00 +0000http://elposhox.dev/en/posts/cloudfront-vpc-origin-waf-eks/<div class="lead text-neutral-500 dark:text-neutral-400 !mb-9 text-xl"> Two patterns for exposing EKS services. When to use each one, how the WAF evaluation chain works with COUNT + labels, and why your ALB probably shouldn&rsquo;t have a public IP. </div> <h2 class="relative group">Two patterns, each with its place <div id="two-patterns-each-with-its-place" class="anchor"></div> <span class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"> <a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#two-patterns-each-with-its-place" aria-label="Anchor">#</a> </span> </h2> <p>If you run EKS services that need public traffic, you have two architecture options:</p>