请求协助排查EKS集群中AWS负载均衡控制器的TLS握手错误问题

我们在EKS集群中部署了aws-load-balancer-controller（版本1.5.4），Datadog捕获到大量重复的TLS握手错误日志，示例如下：

2023/06/30 07:25:00 http: TLS handshake error from 10.203.3.195:48624: read tcp 10.203.88.141:9443->10.203.3.195:48624: read: connection reset by peer
2023/06/30 07:40:00 http: TLS handshake error from 10.203.3.195:58196: read tcp 10.203.88.141:9443->10.203.3.195:58196: read: connection reset by peer
2023/06/30 07:45:00 http: TLS handshake error from 10.203.3.195:47312: read tcp 10.203.88.141:9443->10.203.3.195:47312: read: connection reset by peer
2023/06/30 08:05:00 http: TLS handshake error from 10.203.3.195:59076: read tcp 10.203.88.141:9443->10.203.3.195:59076: read: connection reset by peer
2023/06/30 08:10:00 http: TLS handshake error from 10.203.3.195:39446: read tcp 10.203.88.141:9443->10.203.3.195:39446: read: connection reset by peer
2023/06/30 08:15:00 http: TLS handshake error from 10.203.3.195:35556: read tcp 10.203.88.141:9443->10.203.3.195:35556: read: connection reset by peer
2023/06/30 08:25:00 http: TLS handshake error from 10.203.3.195:52352: read tcp 10.203.88.141:9443->10.203.3.195:52352: read: connection reset by peer
2023/06/30 08:25:00 http: TLS handshake error from 10.203.3.195:52356: read tcp 10.203.88.141:9443->10.203.3.195:52356: read: connection reset by peer
2023/06/30 08:25:00 http: TLS handshake error from 10.203.3.195:52366: read tcp 10.203.88.141:9443->10.203.3.195:52366: read: connection reset by peer
2023/06/30 08:30:00 http: TLS handshake error from 10.203.3.195:45512: read tcp 10.203.88.141:9443->10.203.3.195:45512: read: connection reset by peer

经排查，日志中的IP 10.203.3.195 对应Kubernetes默认端点，执行k get endpoints命令输出如下：

k get endpoints
NAME         ENDPOINTS                          AGE
kubernetes   10.203.2.46:443,10.203.3.195:443   688d

我们已尝试以下操作，但问题仍未解决：

• 将Helm Chart版本升级至最新
• 通过defaultSSLPolicy参数将ELB的TLS/SSL安全策略从ELBSecurityPolicy-2016-08修改为AWS推荐的ELBSecurityPolicy-TLS13-1-2-2021-06

这些日志不影响应用性能，但我们希望彻底消除此类日志，恳请提供解决方法。

内容的提问来源于stack exchange，提问作者Georgi Ivanov