Network load balancer security group
To allow the network Load Balancer to communicate with the worker node on the NodePort, create a dedicated security group:
First, configure the inbound rules:
Set the port range on the NodePort to 31032
Restrict the source as the CIDR related to the private VPC of the EKS cluster.
There are no restrictions on outbound rules:
Attach the security group to the worker nodes. This must be done for all the worker nodes: