Dear AKS Users,
I have started to use Azure AKS and had a question. So, I have a created a private Azure AKS Cluster with Azure CNI which is connected to my VLAN 10.0.0.0/16 and Subnet 10.0.3.0/24. I understand that my pods will get an IP from the 10.0.3.0/24 range which is understood. I am not sure on the 'Kubernetes Service Address Range' and 'Docker Bridge Address'.
What should I specify there ?
Lets say if i specify 10.0.4.0/24 to the Kubernetes Service Address Range, will it mean that all the services that i create it will be from that range ?
If so, will I then be able to route/connect directly from any machine connected within the same VNET (example a VM that in same vnet but different subnet) to a service of type cluster IP on its cluster-IP within the k8s cluster ? I would not need an ingress for that or i will still need an ingress ?
If i have to use ingress for (3) above, what is the difference between using a CNI vs Kubenet. I understand Kubenet services also need Ingress as they can't be directly connected to. Our use-case is that we have a Site-To-Site VPN between Azure and On-Premise and we want kubernetes services to connect to on-site services both-ways. I understand I have to use the CNI for that. If i use kubenet, I can only have one-way (pod initiated) connection to the on-site services but not vice-versa.
Thanks

