Questions tagged [aws-nlb]

86 questions
2
votes
1 answer

How to only allow a few IPs to reach a AWS Network Load Balancer?

I am running my tasks (in public subnets) using AWS Fargate, and an Internet-facing NLB distributes the traffic to all the available tasks through a target group. I have a security group added to the service that only allows the the NLB's IP. We are…
Saif
  • 2,530
  • 3
  • 27
  • 45
2
votes
1 answer

Asp.net Core behind a Nginx Ingress Controller on AWS EKS got "502 Bad Gateway"

I follow the guide from aws and successfully have a EKS cluster with a NLB in front of the Nginx Ingress Controller. The routes working fine, I can access the /banana and /apple, look okay to me Then, I try to add another ASP.net app and update the…
2
votes
1 answer

AWS Create Listener from Console - All target groups are greyed out

I have a Network Load Balancer (NLB) running in my VPC. I am trying to create a listener for my NLB from the console. The corresponding EC2 instance (that corresponding to my target group) and its listener require SSL. I am creating a listener to…
2
votes
2 answers

How to set the private ip address of AWS NLB when create Kubenetes service?

I'd like to create a nginx ingress controller with AWS internal NLB, the requirement is fix the IP address of NLB endpoint, for example, currently the NLB dns of Nginx ingress service is abc.elb.eu-central-1.amazonaws.com which is resolved to ip…
Tien Dung Tran
  • 1,127
  • 4
  • 16
  • 32
2
votes
1 answer

Kubernetes/EKS rolling update causes downtime

We have the following configuration for our service that's deployed to EKS but it causes downtime for about 120s whenever we make a deployment. I can successfully make requests to the new pod when I port forward to it directly, so the pod itself…
n00b
  • 5,843
  • 11
  • 52
  • 82
2
votes
0 answers

How does AWS NLB preserve the client source IP address

I am playing with the NLB. One feature is that it can preserve the client source IP. I tested it and it works. However, has anybody been wondering how it works? Let's say that my home PC is the client for the HTTP request and it is behind the public…
Difan Zhao
  • 379
  • 6
  • 20
1
vote
2 answers

Helm Ingress-Nginx In AWS EKS creates an internal NLB (Schema)

I normally use GKE but wanted to test EKS and I am struggling to deploy nginx as ingress-controller. In GKE I get an external IP, put it in the values config (controller.service.loadBalancerIP) sent it and ready to go. In AWS an NLB is been created…
1
vote
1 answer

Efficient way to enable HTTP/2 on my EKS container running behind an AWS network load-balancer controller with Route 53

I have a container running on EKS, which is running behind the AWS network load-balancer controller and I am using Route 53 for my domain. I want the server and the load balancer to run on HTTP/2 instead of HTTP/1.1 natively. After passing the…
1
vote
0 answers

AWS TCP Load Balancing Across multiple ports on the same EC2 instance

I have a requirement to have an AWS load balancer that listens on a non standard port and routes connections to different ports on the same EC2 instance(s), treating each port as a unique target. The Ec2 instances would be depoloed using Auto Scale…
1
vote
0 answers

AWS NLB TLS Termination for gRPC Traffic

As per this comment, it might be possible to terminate TLS on AWS Network Load Balancer (NLB) for gRPC traffic. I am, however, struggling reproducing it - regardless of NLB configuration used (SSL negotiation policy, ALPN policies, etc.), client…
Sezi
  • 73
  • 8
1
vote
0 answers

Is it possible to Public API Gateway -> VPC Link -> NLB -> Private API Gateway?

I have a VPC with multiple private API Gateways. This is so services within the VPC can call other private APIs without leaving VPC. I have a Public API Gateway that I want my clients to engage with, but I want this Public API Gateway to have it's…
1
vote
1 answer

NLB or HAProxy - Better way to perform SSL termination?

My architecture looks like this: Here, the HTTPS requests first go to the route53 service for DNS resolution. Route53 forwards the request to the Network Load balancer. This service redirects the traffic to HAProxy pods running inside a Kubernetes…
Kapil Khandelwal
  • 1,096
  • 12
  • 19
1
vote
1 answer

How to get all the registered targets from a target group via AWS CLI command?

How to get all the registered targets from a target group via AWS CLI command? FYI, describe health is not working. Targets type: IP
1
vote
0 answers

How to maintain the lb dns in eks

I have connected AWS API Gateway to NLB in my eks using VPC Links. I have around 3 microservices which are served with 3 NLBs(private to VPC) respectively. Due to cost reduction I am planning to deploy the microservices only during for 8 hrs during…
Vamsi
  • 388
  • 2
  • 12
1
vote
1 answer

How to restrict access to AWS NLB?

Service A: I have some AWS resources sitting behind a AWS NLB. Service B: Calls the endpoints exposed by the AWS NLB of Service A. This service has all the authentications that are required. I have however run into an issue, If a malicious user is…
coda
  • 2,188
  • 2
  • 22
  • 26