Questions tagged [amazon-alb]

Amazon Web Services supports three types of Load Balancers. An Application Load Balancer (ALB) functions at the application layer, the seventh layer of the Open Systems Interconnection (OSI) model.

Filter by
Sorted by
Tagged with
0
votes
1answer
26 views

AWS CodeDeploy with two listeners

I have an application load balancer with two listeners ( 80 and 443 ) and I want use CodeDeploy to deploy my fargate container. I cannot redirect http traffic to https... With CodeDeploy I can set up ...
0
votes
1answer
27 views

Unable to setup Apache NiFi behind AWS ALB

I am having an issue setting up Apache NiFi behind AWS ALB. I can currently access the UI when hitting the server's public IP address directly but have been unsuccessful getting it working behind the ...
0
votes
1answer
20 views

403 when using Terraform to attach Lambda Function to Target Group w/ ALB

I'm able to create Instances, Target Groups, and ALBs just fine with Terraform, but am getting stuck when trying to use Lambda Functions. It looks like the Lambda function gets created OK along with ...
1
vote
1answer
39 views

AWS ALB SSL/TLS offloading security

AWS ALBs allow one to configure an SSL/TLS certificate for encrypting traffic between the client and the LB. Traffic between the LB and the target can be protected with a certificate, but target ...
0
votes
0answers
45 views

No traffic getting to EKS pods through ALB

I'm hoping someone can point out where I've messed something up with my setup on AWS. The architecture of the application is: 1 VPC with 2 public + 2 private subnets 1 RDS MySQL database within the ...
0
votes
0answers
21 views

SPA from S3 and Java backend in the same domain. ALB fixed response limit

I would like to have S3 bucked stored Single Page Application and its backend in the same domain. Now I am using ALB Listeners configuration to serve a fixed response for my index.html (by path). The ...
0
votes
0answers
21 views

How to Route traffic using AWS ALB Based on Dynamic wildcard subdomains

Is it possible to use the application load balancer to route traffic based on the value of a subdomain that is registered as a wildcard in route53 ? What i mean is that subdomains are going to be ...
1
vote
1answer
82 views

On and off requests take very long on my system

EDITED: I have and issue in my AWS system. Every few requests takes almost exactly 130 seconds to answer. When I say a few I mean 5 to 25 or so. Normally if you cancel the slow request and send again ...
0
votes
1answer
17 views

What could explain downtime when ALB connection count is high but request rates are low?

I have a backend service on EC2s, and requests to the EC2s are routed through an ALB. My backend service had a brief downtime during which it's response latency shot up. This led to a massive build ...
0
votes
1answer
648 views

AWS ALB/NLB HTTPS Target with Self-Signed Cert

I am using AWS to build a service. For this service I want to use ACM certificates. The backend is running on an EC2 instance with TLS enabled using a self-signed certificate. Since ACM certificates ...
-2
votes
2answers
121 views

Securing an AWS ALB

Hi everybody I’m relatively new to AWS web services and I’m struggling to secure an ALB. My web page works in a simple way there’s an api gateway where the methods are defined, then I have a ALB that ...
0
votes
1answer
384 views

Remote Desktop Services Gateway behind AWS ALB connectivity issues

I have set up a Remote Desktop Services Gateway behind an AWS ALB. The AWS ALB does the SSL offloading and talks to the RDS Gateway Server via HTTP (port 80). The configuration works and I can RDP ...
0
votes
1answer
23 views

Cheaper option compared to ALB for using AWS issued certificates

Title basically says it all, I'm curious if there's a service that can handle the SSL layer and then send data to an ec2 instance over plain HTTP (inside the VPN). Application load balancers work ...
0
votes
0answers
390 views

Overriding AWS ALB's default error page(s) with custom one(s) using CloudFront

I have an ALB, containing Rules that forward requests to my private EC2s, hosted on AWS, and when I make a new deployment, I have a script in Lambda that turns off my ASGs and turns them back on. ...
-1
votes
1answer
150 views

ALB writing to 2 postgre sql instances

I have nginx and postgre sql running on the same ec2 instance. It serves a rails app that reads and writes data on that db. I would like to have 2 instances behind an ALB service to distribute load ...
0
votes
0answers
32 views

AWS load balancer sending traffic to unhealthy instances

I have an Elastic Beanstalk environment with four EC2 instances and an ALB. If I look on the EB dashboard, I can see my EC2 instances; if a PHP error gets introduced on one of them, that instance gets ...
1
vote
1answer
69 views

AWS: ECS/ALB setup, converting a docker-compose file, port mapping to mulitple containers

I know this is not an 'original question'. The general topic is covered extensively. Neverthless i'm struggling with my particular setup: I'm trying to basically convert the following docker-compose ...
0
votes
0answers
75 views

Persistent 502s from AWS ALB

This is our architecture: Cloudflare -> ALB 1 -> Nginx API Gateway -> ALB 2 -> (Nginx Sidecar -> Application) The application and the sidecar are on the same box and communicate via unix domain ...
0
votes
0answers
103 views

Can the domain of AWS ALB Authentication Session Cookie be customized?

I am trying to use AWS Application Load Balancer to authenticate with an IdP over OIDC. I am setting the ALB for a site that is available at a.b.c. I wanted to understand if the ALB listener rule ...
2
votes
2answers
1k views

Is reverse proxy still required between AWS ALB and application server?

Context Web application with application server, i.e. Ruby on Rails with puma. Running within a container on AWS ECS with Fargate. Traffic is routed by AWS Application Load Balancer directly to ...
0
votes
0answers
95 views

Possible to configure ELB/ALB with Upstream to ECS/Fargate with PHPFPM process?

I'm putting a dockerised service onto ECS/Fargate, on our cluster it works as a typical nginx+phpfpm setup, where nginx is upstreaming connections to phpfpm using port 9000. This is kind of a run-of-...
0
votes
2answers
1k views

Database behind AWS load balancer?

I put a load balancer in front of example.com and I believe all traffic for *.example.com goes to the load balancer My database is named db.example.com and listening at 5432 Application Load ...
0
votes
1answer
247 views

AWS alb and DNS routing

I have example.com behind ALB Since I'm using external DNS service other than route53, I created a CNAME in my DNS service such as some-unique-name.ap-northeast-2.elb.amazonaws.com pointing to ...
0
votes
1answer
434 views

How to route to Cloudfront+s3 and rest to ALB in Route53?

The project has a domain name foobar.com pointing to a legacy system, hosting and serving mainly static files. The project got more complex over time and in AWS ALB certain /routes are pointed to ...
1
vote
0answers
657 views

Istio : HTTPS Traffic converted to HTTP with port set as 443

Bug description We have setup an istio over on eks cluster & a java app is hosted in it. The pod has been created along with service with type ClusterIP We have created Virtual Service, Gateway &...
0
votes
0answers
220 views

AWS Application Load Balancer returns '412 Precondition Failed' when a conditional header is present

I have an ALB with a Lambda as a target. The lambda is a simple Python one and the only thing it does, is a return of a hardcoded dict. The response is a valid response for ALB and includes Etag ...
1
vote
0answers
152 views

AWS Application Load Balancer with https upstreams not working

Anyone help with a problem i am having with trying to configure my AWS Application Load Balancer to use an HTTPS upstream on a IIS server. Everything works fine when I set the target group to hit the ...
1
vote
0answers
326 views

Nginx proxy_pass failing when keeping EC2 behind aws ALB, 502 status error

I have 2 instances one for backend(URL: be.domain.com) and another for frontend(URL: fe.domain.com) pointed through Backend-TG and frontend-TG respectively. AWS application load balancer used to ...
2
votes
1answer
202 views

Is there a CloudWatch metric that corresponds to ALB data transfer usage/cost?

I have an Application Load Balancer whose data transfer cost I want to monitor. In Cost Explorer, I can filter on usage type "DataTransfer-Out-Bytes", and see how many GB of data it is sending, and ...
0
votes
0answers
25 views

Can a target group have more than one asg in aws?

I want a target group for an alb to be able to add a second asg. This is that so it can slowly replace the current asg.
1
vote
1answer
406 views

How to assign the same elastic IP to a NAT gateway and an ALB?

The architectural diagram shown below is taken from an AWS blog titled Task Networking in AWS Fargate. The blog was posted in January 2018. The description that comes with the image states that: ...
0
votes
1answer
556 views

application load balancer fails to upload large file

I have a bit of a problem. I have a php larvel application that sits on a ec2 linux instance behind an application load balancer. When I try to upload a large file the process fails with no error ...
-1
votes
1answer
55 views

AWS Application load balancer in switching between two frontends

I have two angular6 frontends, one running on port 4000, the second running on 4100. Do a Dockerized push to ECR and create two task definitions ... create cluster and then 2 services of these two ...
1
vote
1answer
94 views

Should I share an AWS application load balancer between applications?

I have two unrelated applications ( they are not two microservices of the same application, but two separate services ) running on Amazon Ec2 or Fargate. Should I share an application loadbalancer ...
2
votes
1answer
960 views

Why is my autoscaling group instance unhealthy?

I'm noticing a very strange issue with an AWS auto-scaling group. Instances are being reported (incorrectly) as being unhealthy. The instances are then being terminated and replaced unnecessarily. ...
3
votes
1answer
1k views

HTTP/2 for ALB with EKS on AWS

I'm experimenting with AWS EKS and have created the following setup: EKS cluster with a single service/pod/node AWS ALB ingress controller ALB I try to configure the ALB to: create access logs ...
0
votes
0answers
1k views

AWS Application Load Balancer 502 Bad Gateway

I am using AWS ECS Fargate and have an application load balancer to forward all the connections to the correct instance. I did already manage to get up a cluster and a service up and running ...
12
votes
2answers
6k views

AWS Fargate service: scale to zero?

I've recently migrated a small web application to AWS using Fargate and Aurora Serverless. The application doesn't get much traffic so my goal is to save cost while no one is using it. Aurora ...
0
votes
1answer
245 views

Can we make AWS ALB forward request from a single user to the same target always?

I'm new to AWS ALB and I have set up an AWS Application Load Balancer along with ECS cluster with 2 EC2 instances. The entire architecture works fine. But later I find that the API calls from a single ...
5
votes
1answer
2k views

AWS ALB resolves to 2 IPs. What are they?

I have set up an AWS ALB for my application. The ALB is connected to AWS ECS cluster which has 2 instances. The 2 instances are in private subnets. When I resolve the IP of the ALB DNS name, I get 2 ...
3
votes
1answer
2k views

AWSApplication load balancer - custom headers

I have question regarding AWS ALB. Does anybody knows if it is possible to modify (specifically ADD) custom headers to requests? Something like proxy_set_header in nginx http://nginx.org/en/docs/http/...
1
vote
1answer
509 views

robots.txt route requires a backslash when behind an Application Load Balancer

I have a rails site using an AWS ALB and all routes appear to work except one, robots.txt. I am getting the error "ERR_TOO_MANY_REDIRECTS", link to example: https://www.mamapedia.com/robots.txt ...
0
votes
1answer
206 views

How do we configure an ALB with Elastic IP's to only resolve to our FQD

We have a situation where we have a website, www.mamapedia.com which is accessible both by the ALB address and the Elastic IP's assigned to the ALB at any given time. This is problematic and is ...
1
vote
0answers
744 views

Nginx epoll_wait() issue under load test with Load Balancer

I'm using JMeter CLI to load tests our micro services (Nginx+PHP-FPM+Laravel). Micro services are all under an AWS Application Load Balancer which performs a health-check. For that micro service, ...
0
votes
0answers
43 views

SSL implemation

So, i know we can enable SSL on the AWS Application load balancers. But the set up here is, the connections terminates on an on-prem f5 loadbalancer. The traffic is then routed to an internal(private) ...
4
votes
1answer
153 views

Is there any point in using more than one Application Load Balancer on AWS?

One can add to ALB multiple listeners and rules that can check for hostname and forward requests to appropriate target groups. So, I'm not sure what could be the point in using more than 1 Application ...
1
vote
1answer
573 views

Cloudwatch event for changes in ALB target groups

I have a lambda function that copies the targets (IP addresses in this case) from one target group to another (deleting any in the second target group that don't appear in the first). This gives us 2 ...
3
votes
1answer
2k views

ALB Connection Draining is always reaching the “Deregistration Delay”

I'm using ECS along with ALB to expose my containers to the internet. When I'm updating a container image (I'm using CloudFormation to update the tasks and services), the target group set the ...
2
votes
2answers
4k views

Cannot get websocket connection working with ec2 + application load balancer

I have an aws application load balancer with an https listener on port 9999, forwarding to a group on port 9999 with an ec2-instance being the target. If I run my websocket server with the host name ...
1
vote
1answer
2k views

Restricting access to a specific domain on AWS

Our current setup is ALB -> Target Group -> EC2 instances At the moment it's possible to access the EC2 servers behind the load balancer using the IP address of the ALB, the DNS Name (e.g. ...