You tested an AKS cluster and disabled HTTP application routing. For production, you need application routing that provides reverse proxy and TLS termination for AKS services using a single IP address. What should you implement?

An AKS Ingress controller provides HTTP/HTTPS routing to services within the cluster, offering features like reverse proxy, configurable traffic routing, and TLS termination, often using a single public IP address. This directly addresses the requirement for application routing with reverse proxy and TLS termination. The container network interface (CNI) plug-in is for network connectivity within the cluster, not application routing or TLS termination. Azure Standard Load Balancers and Azure Basic Load Balancers operate at Layer 4 (TCP/UDP) and can distribute traffic to services but do not provide application-layer routing (HTTP/HTTPS) or TLS termination directly for services within the cluster; an Ingress controller leverages a load balancer for external access but adds the necessary Layer 7 functionality.