Hybrid cloud node pools allow you to add computing resources from on-premises data centers (IDCs) or multicloud environments as nodes to an ACK managed cluster (Pro) for unified management. This approach reduces the complexity of managing heterogeneous environments, enables flexible resource scheduling, and ensures high business availability.
Introduction to hybrid cloud node pools
The hybrid cloud node pool feature for ACK managed clusters (Pro) is available through a whitelist. To enable this feature, contact your account manager.
Scope
Hybrid cloud node pools require you to establish cross-cloud network connectivity over a leased line.
For information about the operating systems supported by hybrid cloud node pools, see Operating system compatibility.
Before you add a hybrid cloud node to a hybrid cloud node pool, you must register it as an Alibaba Cloud managed instance.
Features
Unified resource access: Add server resources from on-premises IDCs or multicloud environments to an ACK managed cluster (Pro) in a standardized way. This provides a consistent experience for deployment, O&M, monitoring, upgrades, and security control, similar to that of on-cloud ECS nodes. This significantly reduces the complexity of managing heterogeneous environments.
Deep capability integration: Integrates core capabilities of ACK managed clusters (Pro), such as elastic scaling, observability (monitoring, logs, and tracing), security hardening, storage, and networking. This ensures a highly unified technology stack across cloud and on-premises environments.
High-performance networking: Uses the Terway Hybrid network plugin to enable network connectivity for containers between cloud and on-premises environments. It also supports the NodeLocal DNSCache component, which provides a DNS cache in your on-premises IDC. This improves DNS performance and stability, and reduces the load on your leased line.
Flexible capacity expansion: Addresses challenges such as cloud resource shortages or capacity limitations in a single region. You can flexibly expand cluster capacity by adding other cloud resource pools, which ensures business continuity and high availability.

Billing
When you use a hybrid cloud node pool in an ACK managed cluster (Pro), the total cost consists of three parts: a cluster management fee, a hybrid cloud node management fee (currently free during the invitational preview), and cloud product resource fees.
Node Pool Feature Comparison
Feature | Hybrid cloud node pools | |
Create, edit, delete, and view |
For more information, see Create and manage a node pool. |
For more information, see Create and manage a hybrid cloud node pool. |
Manual or automatic scaling |
For more information, see Manually scale a node pool and Node scaling. | Not supported |
Add existing nodes | Use the add existing nodes feature to add a purchased ECS instance to an ACK cluster as a worker node, or to rejoin a worker node to a node pool after removing it. This feature has some limits and notes. For more information, see the referenced document. For more information, see Add existing nodes to an ACK cluster. | You must first register your hybrid cloud nodes as Alibaba Cloud managed instances before you can add them to an ACK cluster for unified management. For more information, see Add a hybrid cloud node. |
Remove nodes | If you no longer need certain nodes, remove them from the cluster or node pool. Follow the standard procedure for removal to avoid unexpected behavior. For more information, see Remove nodes. | If some hybrid cloud nodes are no longer needed, you can remove them from the cluster or the hybrid cloud node pool. Important Removing a hybrid cloud node from a hybrid cloud node pool does not unregister it as an Alibaba Cloud managed instance. For more information, see Remove a hybrid cloud node. |
Upgrade the kubelet version | You can automatically upgrade clusters to automatically upgrade the kubelet and runtime. Upgrade the kubelet and containerd versions of nodes in a node pool. For more information, see Upgrade a node pool. | Upgrade the kubelet and containerd versions of hybrid cloud nodes in a hybrid cloud node pool. Important ACK managed ECS nodes can be automatically upgraded. For Alibaba Cloud managed instances, you must perform the upgrade manually. |
Change the operating system | Upgrade the operating system version or change the operating system type. For example, switch an EOL operating system to ContainerOS or Alibaba Cloud Linux. For more information, see Change the operating system of nodes in a node pool. | Not supported |
Fix CVE vulnerabilities | You can enable automated O&M capabilities Manually scan for CVE vulnerabilities and fix security vulnerabilities in the node operating system. Some CVE vulnerability fixes require a node restart. For more information about the feature and related notes, see the referenced document. For more information, see Manually fix OS CVEs. | Provides CVE vulnerability scanning and fixing solutions for Kubernetes components such as containerd and kubelet in a hybrid cloud node pool. |
Customize kubelet parameters for a node pool | Customize kubelet parameters for nodes at the node pool level to adjust node behavior. For example, adjust cluster resource reservation to manage resource usage. For more information, see Customize the kubelet configurations of a node pool. | Customize the kubelet parameters for hybrid cloud nodes at the hybrid cloud node pool level to adjust node behavior. For example, you can adjust cluster resource reservations to manage resource usage. |
Customize OS parameters for a node pool | Customize OS parameters for nodes at the node pool level to optimize system performance. For more information, see Manage OS parameters of a node pool. | You can use Cloud Assistant to run preset commands for kernel parameter tuning. |
Shared responsibility for security
The shared responsibility model is as follows:
Alibaba Cloud is responsible for:
The security of the control plane infrastructure, including computing, storage, and network resources.
For hybrid cloud node pools, providing vulnerability patches and version updates for Kubernetes components.
You are responsible for:
The network connectivity between hybrid cloud nodes and the ACK control plane.
The stability and security of the hybrid cloud nodes themselves, and the stability and security of the operating system on these nodes. This includes but is not limited to fixing security vulnerabilities and performing version updates.
The security protection of your business applications, and the secure configuration and updates of your hybrid cloud nodes.
Operating system compatibility
The following table lists the operating systems supported by hybrid cloud node pools. To use other operating systems, contact your account manager for an evaluation.
Image type | Platform | System architecture | Image name (including version) | Image ID |
Alibaba Cloud Linux 3.2104 LTS 64-bit Container-Optimized Edition | Alibaba Cloud | x86_64 | Alibaba Cloud Linux 3.2104 Container-Optimized | aliyun_3_x64_20G_container_optimized_20241226.vhd Uses cgroup v2 by default |
Alibaba Cloud Linux 3 | Alibaba Cloud | x86_64 | Alibaba Cloud Linux 3.2104 LTS 64-bit | aliyun_3_x64_20G_alibase_20240528.vhd |
Alibaba Cloud Linux 3 (ARM) | Alibaba Cloud | arm64 | Alibaba Cloud Linux 3.2104 LTS 64-bit ARM Edition | aliyun_3_arm64_20G_alibase_20240528.vhd |
Alibaba Cloud Linux UEFI 3 | Alibaba Cloud | x86_64 | Alibaba Cloud Linux UEFI 3.2104 Security Enhanced | aliyun_3_x64_20G_uefi_alibase_20230727.vhd |
Red Hat | Red Hat | x86_64 | Red Hat Enterprise Linux (RHEL) 9.3 64-bit | Red Hat Enterprise Linux 9.3 64-bit RHEL 9 and later use cgroup v2 by default |
Ubuntu | Ubuntu | x86_64 | Ubuntu 22.04 64-bit Ubuntu 24.04 64-bit | None |