We have several Machines that communicate with each other inside a VPC on AWS. All of them are in privete subnets with no public IP address. One of those machines is a MSSQL server, our main Database.
In our office we have a vpn tunnel with this vpc and can use private IPS.
I am trying to securely gain access over the internet to the database from my home, trying to not modify the database instance.
I created a public load balancer that listens to tcp 1433 and passes the traffic to the instance also to port 1433; this gives me database access however I am worried it is not secure.
I would like the traffic to be encrypted going to the load balancer and then hitting the DB like as regular traffic after that.
Is this possible using a load balancer?
I have a domain, and a certificate throu aws certificate manager.