3

I am looking for integrating WAF in my existing server setup, since I have Classic Load Balancer (with EC2 instances) which does not support WAF I need to migrate to Application Load Balancer.

Is it possible to migrate the existing Classic Load Balancer to Application Load Balancer without changing the DNS (A Record)?

Zlahc
  • 53
  • 1
  • 5
  • Nope I don't think so , you can associate custom domain to to LB but the record will change as new LB will created. If you would have used custom domain name then you would have to change it in once place only. – Kush Vyas Nov 03 '17 at 10:02

2 Answers2

2

You cannot migrate from CLB to ALB using any tools that I am aware of. You can create the ALB to run in parallel with the CLB. Once you are confident that the ALB is working correctly with you WAF configuration, change the Route 53 records. Wait a few days and then delete the CLB. This will allow the DNS servers around the world to catch up with the new DNS settings. The one area that you will have problems running the new ELB in parallel is if you are using SSL offload on the ELB. This will require the DNS switch over so that the DNS name matches the SSL records. For this, I usually add a "test.mydomain.com" record to verify that SSL is working.

John Hanley
  • 74,467
  • 6
  • 95
  • 159
  • It seems like you're right. To see ALB in the configuration settings of an ElasticBeanstalk environment one has to recreate it. – Amio.io Jun 29 '18 at 08:50
2

Amazon released a migration tool to make it easy to migrate Classic Load Balancer to an Application Load Balancer. They provide instructions on how you can do the migration side-by-side, with a strategy for gradually directing traffic over to the new ALB. For details, see https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/migrate-to-application-load-balancer.html

Bishbulb
  • 181
  • 2
  • 4