An Azure Kubernetes Service (AKS) cluster with API Server VNet Integration configured projects the API server endpoint directly into a delegated subnet in the VNet where AKS is deployed. This enables network communication between the API server and the cluster nodes without any required private link or tunnel.
The API server is available behind an Internal Load Balancer VIP in the delegated subnet, which the nodes are configured to utilize.
By using the API Server VNet Integration in an AKS cluster, you can ensure network traffic between your API server and your node pools remains on the private network only.
This feature is currently in public preview.
Learn more