I have implemented an environment for a Wordpress website. I have a loadbalncer (ALB) that is connected to an EC2 server plus an AutoScaling group(for failover).

As we need to update Wordpress and install some plugins on EC2 server, I need to set up NAT gateway to allow internet connection from wordpress server(ec2) to internet.

I have set up the NAT gateway like the following link:

However I could not be able to reach the Website (DNS of ALB) afterward.

My Routetable set up looks like below:

                      Route                Subnets
Main Route Table local       -

Public Route Table local,  (ELB subnets)

Private route B local, (EC2 subnets)

Private route C local, (RDS subnets)

The Public route is assigned to two public subnets which are connected to the LoadBalancer.

The Private route B,C are assigned to private subnets: Web server()EC2 plus database-RDS.

Any help would be appreciated.

enter image description here

  • 2
    There's only one route table per subnet. Why do you have four route tables? Suggest you provide a diagram of what instances / services are where.
    – Tim
    Aug 10 '17 at 19:06
  • What route table is the private instance in? Also did you place the NAT gateway in a public subnet?
    – strongjz
    Aug 11 '17 at 12:46
  • @strongjz The Private route B,C are assigned to private instances which are sonncted to NAT Gateway, The LoadBalancer is assigned to Public subnets which are connected to Internet Gateway
    – Matrix
    Aug 13 '17 at 21:45
  • I see you edited your question, but it's still quite unclear what your network setup is, which subnet servers are located in, and what route tables apply to what. A diagram might help, if you draw it effectively. You need to be a lot more clear if you want any help.
    – Tim
    Aug 13 '17 at 21:46
  • @Tim Yes, there is only one default route table per VPC however it is possibe to make more route tables when we want to separate public and private subnets.
    – Matrix
    Aug 13 '17 at 21:46

Your diagram shows the IGW subnets do not overlap with your NAT Gateway subnets. This is the issue. The NAT Gateway needs to be in a subnet with an attached IGW. This is true even though the NAT Gateway has a public ip (Elastic IP).

  • Thanks for the reply but my NAT Gateway is in a public subnet( Is there something else that I'm missing in the set up?
    – Matrix
    Aug 14 '17 at 14:30
  • Do you have any NACLs configured? Aug 18 '17 at 1:22
  • No, it is as default.
    – Matrix
    Aug 24 '17 at 6:53

However I could not be able to reach the Website (DNS of ALB) afterward.

  1. Is the ALB internet-facing (as opposed to internal)?
  2. Does the security group on the ALB allow you to connect?

(Network packets from Internet via internet-facing ALB to EC2 instances and back ought not traverse a NAT gw).

  • Thanks for the reply. Yes the ALB is open for the internet. The Website has been set up with ALB before and it works fine. I just need to add NAT GW in order to do some updated on the server which is in a private subnet.
    – Matrix
    Aug 21 '17 at 8:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.