ELB is Amazon's managed Load Balancer service, used in conjunction with its EC2 virtual machine cloud hosting service.

learn more… | top users | synonyms (1)

18
votes
1answer
4k views

Does Heartbleed affect AWS Elastic Load Balancer?

The Heartbleed OpenSSL vulnerability (http://heartbleed.com/) affects OpenSSL 1.0.1 through 1.0.1f (inclusive) I use Amazon Elastic Load Balancer to terminate my SSL connections. Is ELB vulnerable?
12
votes
5answers
6k views

How can I make my web server reachable via IPv6 on the AWS platform?

My business's web site uses the AWS platform. I want the site's visitors to be able to reach my content using the IPv6 protocol. How can I add an IPv6 address?
10
votes
3answers
2k views

How can I use https with AWS Cloudfront without paying $600 to upload my cert?

I can host a dynamic website through Amazon CloudFront because they have CNAME Wildcard Support. However, some pages of my Site use HTTPS. Amazon have some documentation about how to associate your ...
10
votes
2answers
3k views

SSL redirect on EC2 instance behind SSL terminating load balancer

I'm trying to redirect all url's to https in a web application. I have an ec2 instance behind an elastic load balancer. SSL is terminated on the load balancer. Any attempts at redirection end up ...
8
votes
3answers
9k views

Install SSL on Amazon Elastic Load Balancer with GoDaddy Wildcard Certificate

I'm a bit stuck installing an SSL Cert on an AWS Elastic Load Balancer. I have a wildcard certificate from GoDaddy and need to point it at the ELB. I have run the command (I ran it on one of the ...
7
votes
2answers
3k views

AWS - Assign an Elastic IP to a ELB

Is it possible to assign an Elastic IP to a Load Balancer?
6
votes
2answers
2k views

How can I setup SPDY with Jetty behind Amazon's ELB?

I want to deploy SPDY, but I'm using Amazon's ELB TCP routing. The ELB also handles the secure connections for us. How can this be configured on the jetty side?
6
votes
2answers
2k views

Redirect all http requests behind Amazon ELB to https without using if

Currently I have an ELB serving both http://www.example.org and https://www.example.org. I would like to set it up so any request pointing to http://www.example.org is redirect to ...
6
votes
2answers
5k views

Force HTTPS with AWS Elastic load balancer

I need to redirect all incoming HTTP traffic to HTTPS on my elastic load balancer. I tired using Apache mod_rewrite: RewriteEngine On RewriteCond %{HTTP:X-Forwarded-Proto} !https RewriteRule ...
5
votes
3answers
7k views

Nginx set_real_ip_from AWS ELB load balancer address

I have a set of Nginx servers behind an Amazon ELB load balancer. I am using set_real_ip (from the HttpRealIpModule) so that I can access the originating client IP address on these servers (for ...
5
votes
2answers
1k views

Load Balancing on Amazon (AWS) and staying up to date

I would like to have a load balancer for my site and have the site up to date. The load balancer will take the AMI I select and spin up more of those instances when processing power hits a certain ...
5
votes
2answers
4k views

What algorithm does Amazon ELB use to balance load?

I found this in the official ELB documentation By default, a load balancer routes each request independently to the application instance with the smallest load. but an article on Newvem says ...
5
votes
3answers
2k views

AWS ELB as backend for Varnish Accelerator

I am working on a large deployment on AWS that has high uptime requirements and variable loads throughout the day. Obviously, this is the perfect use case for ELB (Elastic Load Balancer) and ...
5
votes
3answers
1k views

Is AWS's Elastic Load Balancer a single point of failure?

I am looking at moving our application up to Amazon Web Services. The plan is to have all of the EC2 instances mirrored across two availability zones. Due to data transfer costs, we will be staying in ...
5
votes
3answers
1k views

How do you use ELB's support for PROXY protocol version 1 securely?

Amazon's Elastic Load Balancer supports PROXY protocol version 1. This allows the server behind the load balancer to determine the original source IP address of a client connection. However, the ...
5
votes
1answer
3k views

How to block Nginx access log statements from specific user agents

I am looking to turn off logging in the Nginx access log file from specific requests from http user agents. Basically from the Amazon ELB Health Check and our external (Pingdom) monitoring. Since ...
4
votes
1answer
2k views

Nginx Solution for AWS Amazon ELB Health Checks - return 200 without IF

I have the following code that is working on Nginx to keep the AWS ELB healthcheck happy. map $http_user_agent $ignore { default 0; "ELB-HealthChecker/1.0" 1; } server { location / { if ...
4
votes
3answers
3k views

The site is using outdated security settings that may prevent future versions of Chrome from being able to safely access it

We're using an AWS ELB to do SSL termination and are having an issue where Chrome is displaying "https" in red with a strikethrough. It says "The site is using outdated security settings that may ...
4
votes
2answers
4k views

Can Elastic Load Balancers correctly distribute traffic to different size instances

Just been looking into Elastic Load Balancers. As I understand it they just do round robin, evenly distributing connections to the servers behind them. So what happens if you have different size ...
4
votes
3answers
2k views

Load testing sites behind an EC2 load balancer with ApacheBench

When ever I try to load test a site that is load balanced on EC2 I get the following message: ab -n 20 -c 20 http://www.somesite.com/ Benchmarking www.somesite.com (be patient)...Send request ...
4
votes
2answers
4k views

Setting Up ELB with SSL - What is Backend Authentication?

I started setting up Amazon's Elastic Load Balancing Service for my server pool and I need to setup HTTPS/SSL. I have all my SSL Certificates setup, but then I come to the step for backend ...
4
votes
1answer
1k views

Amazon ELB HTTPS Backend authentication causing invalid certificate error

I have a wild card SSL certificate issued by Starfield Secure Certifcation Authority that is valid thru 2014. I have been using the certificate with ELB without backend authentication (cert not ...
4
votes
2answers
10k views

How to install a Thawte SSL certificate on Amazon Elastic Load Balancer?

Here's my situation. We've generated an SSL certificate from Thawte for a site we're hosting on EC2. We have our servers load balanced using Elastic Load Balancer. Thawte gives us one PKCS signed ...
4
votes
1answer
929 views

How to setup nginx to redirect to https for certain host when behind an SSL termination load balancer

Hello I have a web server (running nginx) in EC2 behind an ELB (load balancer) which terminates SSL connections. If there is a request to www.domain.com it will go http to the ELB and be passed to ...
4
votes
3answers
621 views

AWS ELB poor performance

We're using ELB for SSL termination. Our applications run on EC2 instances behind ELB using HTTP. We're monitoring the application response times and performance hit when going through the ELB seems ...
4
votes
1answer
677 views

Unicorn behind ELB, no nginx

If I understand Unicorn right (and in particular from their philosophy doc) it seems like Unicorn was really designed to operate behind a reverse proxy like nginx. My question is: can I drop nginx ...
3
votes
2answers
572 views

Does amazon provide secure networking between servers

For example, suppose I have an ec2 instance and an elastic load balancer, is it safe to receive HTTPS traffic at the loadbalancer and forward it (unencrypted) to the instance. I've enabled the ...
3
votes
2answers
350 views

Elastic Load Balancing using a chain of domains/hosts

I've setup an elastic load balancer on EC2 which (for example) has the public DNS (A Record) of: LB-165746761.eu-west-1.elb.amazonaws.com I've then registered a domain which I want to act as my ...
3
votes
2answers
3k views

IP Range for internal private IP of Amazon ELB

I'm trying to find out the range of IP addresses that an Elastic Load Balancer could have from an EC2 instance which is behind it. This is so I can configure the HttpRealIpModule of nginx correctly. ...
3
votes
1answer
2k views

ELB Instance Out of service

After implementing ELB and Autoscalling on Amazon AWS. There's a wierd issue happens and we don't know either the reason or the fix. We installed Auto Scalling configuration to add instance of AMI ...
3
votes
2answers
3k views

Endless Redirect Loop with AWS ELB and wordpress site using wordpress https plugin

I have configured an AWS ELB to point to my Ubuntu Server running the Wordpress 3.2.1. Everything worked great on the server until I put it behind a load balancer. I setup the load balancer to ...
3
votes
1answer
58 views

How does nginx distribute traffic among IPs associated with an upstream DNS name?

With this configuration: upstream some_upstream { server some-elb.us-east-1.elb.amazonaws.com:80; } If some-elb.us-east-1.elb.amazonaws.com maps to 2 IP addresses, how will nginx distribute ...
3
votes
1answer
2k views

Using an Elastic Load Balancer with a single EC2 instance on AWS

I'm using the AWS Free Tier, which gives me one free EC2 microinstance and one free Elastic Load Balancer, if I understand things correctly. I understand that usually ELBs are used when you are using ...
3
votes
1answer
339 views

What happens after you deregister an EC2 instance from Elastic Load Balancer?

Suppose I have a couple of web servers behind an ELB instance. I want to take down half of them to do software update. Suppose my application have some potentially longer requests (say take up to 30 ...
3
votes
1answer
48 views

What's a good load balancer check for puppet master

We are running a couple of Puppet Master version 3.7 (Not PE) on AWS EC2 instances behind an Elastic Load Balancer (mainly for high availability). Currently the load balancer's check is just TCP ...
3
votes
3answers
336 views

Block traffic behind AWS ELB

My web servers are behind ELB, I want to block traffic from some specific user agent which is a DDOS attack. Apache always see ip address of ELB as an end user so I tried below attempts: Blocking IP ...
3
votes
2answers
2k views

CloudFront with Custom Origin and ELB

We are using CloudFront for our static assets but also wanted to allow for Gzip. We set up a new distribution with a custom origin pointing back to our application servers which are behind a elastic ...
3
votes
3answers
816 views

adding an ELB to an existing Auto Scaling group

I just created two new ELBs, and I'm trying to figure out how to add one of them to an existing autoscaling group; so far the only way that this seems to be possible is by recreating the already ...
3
votes
1answer
166 views

How to find out the location of Google IP number: e.g. 209.85.143.94

I am building DNS service and I need to find out location of DNS servers querying me. Apparently anyone who is using Google public DNS like 8.8.8.8 is coming from Google /17 network, and if I do geoip ...
3
votes
1answer
446 views

Amazon ELB HTTPS Not working

I'm trying to get HTTPS working with AWS ELB. I've been trying for about an hour, but no matter what i try, i just get connection timed out when connecting via HTTPS. HTTP works fine, but not HTTPS. ...
2
votes
3answers
3k views

How to configure my Elastic Load Balancer to balance SSL traffic?

I'm totally lost so I apologize if I'm not making sense. I need to create a load balancer in EC2 for our application servers. I'm trying make the ELB balance traffic over SSL (8443). However, it's ...
2
votes
3answers
2k views

mod_rpaf behind an Amazon ELB

I've got mod_rpaf installed to get the user's IP address from the X-Forwarded-For header in PHP, Apache logs, etc. Unfortunately, it looks like I have to explicitly set which IPs that header will be ...
2
votes
2answers
470 views

Why can't I create an Alias Resource Record Set for an EC2 instance [closed]

I have been working with AWS for over a year, setting up EC2 instances, domains, ELBs, etc. When I want to assign a subdomain to an EC2 instance, I have to create an elastic IP (that I pay for), ...
2
votes
2answers
2k views

Elastic Load Balancer for multiple webapps

I have N webapps. Each webapp is served by a different hostname in my domain and deployed to 2 instances running in AWS. In other words, I have 2N instances, divided into pairs which run N distinct ...
2
votes
1answer
3k views

how to forward godaddy domain to ec2 load balancer

I have a domain with godaddy: example.com I have an ec2 load balancer pointing to an ec2 instance. I would like to example.com to point to my load balanced instance. I first added a www cname ...
2
votes
2answers
4k views

How to ping / traceroute an AWS ELB

Amazon's load balancers have a network security policy which swallows ICMP packets for both ping and traceroute. It is listed as security group amazon-elb/amazon-elb-sg. Personally I find these ...
2
votes
2answers
2k views

Reverse Proxy Server Cloud Architecture (AWS + nginx)

Currently I cache responses using nginx + fastcgi. I'm in the process of moving my app to AWS. I'm architecting a horizontally scaled approach, but trying to determine where best to put nginx + ...
2
votes
1answer
385 views

Amazon AWS: SSL in our testing environment

My company has a running business web service on AWS which uses a wildcard SSL certificate (works for *.example.com). Multiple partners have subdomains and need SSL (https://partner1.example.com, ...
2
votes
3answers
486 views

Mail bouncing when using a CNAME for domain root and load balancing

We recently moved to EC2 and started using amazon's elb for load balancing. We're using CloudFlare for DNS which allows us to use a cname the domain root. However, we occasionally have people tell ...
2
votes
1answer
567 views

AWS WebServer architecture (ELB + iptables)

I'm currently working on the architecture of high-traffic high-availability website. We are using AWS. Currently, we have: Route 53 -> ELB -> Multiple EC2 instances -> RDS Multi AZ. Each EC2 ...