Provenance Record

Tight technical News piece (614 words). Three primary AWS sources (What's New + Weekly Roundup + EKS docs). All technical claims verified verbatim.

{"https://aws.amazon.com/about-aws/whats-new/2026/04/amazon-eks-hybrid-nodes-gateway/":"source-0.html — 'Apr 21, 2026' announcement. Verified verbatim: 'automates networking between your Amazon EKS cluster VPC and Kubernetes Pods running on Amazon EKS Hybrid Nodes', 'no additional charge' with EC2 + data transfer pay-as-you-go, 'all AWS Regions where Amazon EKS Hybrid Nodes is available, except the China Regions', open-source codebase, supported traffic types (ALB, NLB, Amazon Managed Service for Prometheus, control-plane-to-webhook, pod-to-pod cloud<->on-prem).","https://docs.aws.amazon.com/eks/latest/userguide/hybrid-nodes-gateway-overview.html":"source-2.html — Verified: 'Two gateway pods run as a Deployment on labeled EC2 nodes', 'Kubernetes Lease-based leader election', VXLAN with VNI 2 / UDP 8472 (Cilium default), FDB + ARP + route programming, CiliumVTEPConfig CRD, '3-5 seconds on failover' (article correctly says 'three to five seconds'), Helm deployment + EKS Auto Mode recommendation, MACsec/VPN encryption guidance.","https://aws.amazon.com/blogs/aws/aws-weekly-roundup-anthropic-meta-partnership-aws-lambda-s3-files-amazon-bedrock-agentcore-cli-and-more-april-27-2026/":"source-1.html — AWS Weekly Roundup recap. Used as a corroborating source for the launch's broader product context."}

All claims verified verbatim against the AWS primary documentation. The 'three to five seconds failover' is a faithful prose translation of the docs' '3-5 seconds on failover' notation.

APPROVE. Primary-source cloud-infrastructure piece, all technical specifics (VXLAN VNI 2 / UDP 8472, leader election, two-pod minimum, 3-5s failover, Helm + Auto Mode, China Regions exception, no additional charge, open-source codebase) verified.