Questions tagged [amazon-alb]

Amazon Web Services supports three types of Load Balancers. An Application Load Balancer (ALB) functions at the application layer, the seventh layer of the Open Systems Interconnection (OSI) model.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

WAF-protected ALB scaling costs in DDoS scenario

I have an ALB behind Cloudfront. Both of which have SSL certificates and therefore provide SSL offloading, both protected with WAF WebACLs. The ALB's ACL checks a header - a common practice protecting ...
1
vote
1answer
37 views

How to authorize only IP from a Fargate ECS service for MongoDB Atlas Cluster

I have an ECS Fargate service mapped to an Application Load Balancer on AWS. In this service, there are several task that are frequently killed and restart. These tasks should be able to connect to a ...
1
vote
0answers
46 views

AWS ALB and HAProxy Keep-Alive header

Has any one come across this behavior? AWS ALB is sending traffic to HaProxy. HaProxy sets keep-alive header to 29 seconds. Client connected to ALB does not see this header. It can only see "...
0
votes
0answers
32 views

How do you route to a mix of HTTP and HTTPS backends from an ALB Ingress?

I have a Kubernetes cluster running in EKS (on AWS.) In the cluster I have Elasticsearch, Kibana and various other web services. I would like to set up a single ALB loadbalancer such that: Requests ...
0
votes
1answer
32 views

Configure an EC2 instance as firewall of an Application Load Balancer

My current infrastructure is basically an DNS (Route 53) -> WAF -> ALB. The WAF is in front of the load balancer with some AWS managed filters. My application is a PHP web page and an API. Now I'...
0
votes
1answer
27 views

How to set a public LB route to a proxy on AWS?

I built this traffic route in a VPC. Route53->ACM(SSL)->Public ALB->EC2(Nginx proxy)->Private ALB->ECS(Internal App) The EC2's security group is allowing tcp 80 and 443. The ECS' ...
0
votes
0answers
79 views

Secure websocket connection to server running on EC2 fails

I have a node.js websocket server running on an EC2 instance on port 8080. Normal websocket connections (ws://) work fine but when I'm trying to make a secure connection (wss://), the websocket ...
0
votes
0answers
18 views

Nginx proxy pass alternative in AWS

In my Nginx config I am setting up a reverse proxy rule to s3 bucket like below location ~ /feeds/(.*\.rss$){ ... proxy_pass https://xxx.s3.amazonaws/feed/$1; ... } Is there a way that I can remove ...
0
votes
0answers
24 views

Throwing 404 errors AWS

What might be the possible reason why the 502s were being returned here? The 403s also look like WAF is firing them. Could anyone please suggest a way to allow those resources to be safely given to ...
0
votes
0answers
43 views

Application Load Balancers Requests Hanging

In my aws env requests are hanging at the ALB for some reason. I haven't been able to identify a cause yet aside from Cache hanging requests there and possibly the session write being left open ...
0
votes
0answers
33 views

am I losing packages in AWS ALB?

I have an application load balancer that is redirecting the traffic by host to the target group Listener HTTP: redirect host -> something#.dns.com -> HTTPS Listener HTTPS: something.dns.com ->...
0
votes
0answers
59 views

Using ALB to target PHP-FPM ECS containers

I'd love to know if this is actually posible but I'm sure I've seen it demonstrated by one of our old AWS TAMs. I am serving PHP-FPM containers (port 9000) out of ECS hosting a PHP application. I am ...
0
votes
0answers
152 views

Cloudfront 502 error with ALB origin in different region

I have a CloudFront which has one of its origins as an application load balancer, this load balancer is available in a different region from the CloudFront which is only available in N.Virginia and is ...
0
votes
1answer
137 views

AWS ALB Shows Target Group unhealthy, even though port 80 is open to Internet

I've built an AWS ALB & Target group via Terraform and everything looks correct but the Target Group is reporting unhealthy for HTTP, HTTPS, and TCP. The instance is a t3.nano in us-east-2 and ...
0
votes
1answer
219 views

AWS EKS Ingress Timeout On Any Non-Root Path

We have configured an Ingress resource on our EKS cluster with rewrites from /.* on the load balancer to the matching URI upstream. If we visit staging.my-domain.com/, we see a successful health-check ...
1
vote
0answers
103 views

aws-load-balancer-controller annotations not working

I'm trying to automatically start an ALB in my EKS cluster by using the aws-load-balancer-controller This is what the logs of my deployment look like: $ kubectl logs -n kube-system deployment.apps/aws-...
1
vote
0answers
115 views

Apache 502 bad gateway response when using AWS Application Load Balancer and Centos 7

I am new in Linux/centos, I configured a Laravel application in my AWS EC2 Instance (Centos 7),The application was working fine but after that I configured a Application Load Balancer to use path ...
0
votes
0answers
99 views

Occasional 502 error with Apache behind AWS application load balancer?

I run a small education website that's experienced some significant growth recently (now seeing maybe a 1-2 million requests per day). We run 6 EC2 web servers behind an application load balancer, ...
0
votes
1answer
54 views

AWS CodeDeploy with two listeners

I have an application load balancer with two listeners ( 80 and 443 ) and I want use CodeDeploy to deploy my fargate container. I cannot redirect http traffic to https... With CodeDeploy I can set up ...
0
votes
1answer
80 views

Unable to setup Apache NiFi behind AWS ALB

I am having an issue setting up Apache NiFi behind AWS ALB. I can currently access the UI when hitting the server's public IP address directly but have been unsuccessful getting it working behind the ...
1
vote
1answer
438 views

403 when using Terraform to attach Lambda Function to Target Group w/ ALB

I'm able to create Instances, Target Groups, and ALBs just fine with Terraform, but am getting stuck when trying to use Lambda Functions. It looks like the Lambda function gets created OK along with ...
1
vote
1answer
90 views

AWS ALB SSL/TLS offloading security

AWS ALBs allow one to configure an SSL/TLS certificate for encrypting traffic between the client and the LB. Traffic between the LB and the target can be protected with a certificate, but target ...
0
votes
0answers
28 views

SPA from S3 and Java backend in the same domain. ALB fixed response limit

I would like to have S3 bucked stored Single Page Application and its backend in the same domain. Now I am using ALB Listeners configuration to serve a fixed response for my index.html (by path). The ...
1
vote
1answer
163 views

On and off requests take very long on my system

EDITED: I have and issue in my AWS system. Every few requests takes almost exactly 130 seconds to answer. When I say a few I mean 5 to 25 or so. Normally if you cancel the slow request and send again ...
0
votes
1answer
41 views

What could explain downtime when ALB connection count is high but request rates are low?

I have a backend service on EC2s, and requests to the EC2s are routed through an ALB. My backend service had a brief downtime during which it's response latency shot up. This led to a massive build ...
1
vote
1answer
4k views

AWS ALB/NLB HTTPS Target with Self-Signed Cert

I am using AWS to build a service. For this service I want to use ACM certificates. The backend is running on an EC2 instance with TLS enabled using a self-signed certificate. Since ACM certificates ...
-2
votes
2answers
144 views

Securing an AWS ALB

Hi everybody I’m relatively new to AWS web services and I’m struggling to secure an ALB. My web page works in a simple way there’s an api gateway where the methods are defined, then I have a ALB that ...
0
votes
1answer
1k views

Remote Desktop Services Gateway behind AWS ALB connectivity issues

I have set up a Remote Desktop Services Gateway behind an AWS ALB. The AWS ALB does the SSL offloading and talks to the RDS Gateway Server via HTTP (port 80). The configuration works and I can RDP ...
0
votes
1answer
70 views

Cheaper option compared to ALB for using AWS issued certificates

Title basically says it all, I'm curious if there's a service that can handle the SSL layer and then send data to an ec2 instance over plain HTTP (inside the VPN). Application load balancers work ...
1
vote
0answers
2k views

Overriding AWS ALB's default error page(s) with custom one(s) using CloudFront

I have an ALB, containing Rules that forward requests to my private EC2s, hosted on AWS, and when I make a new deployment, I have a script in Lambda that turns off my ASGs and turns them back on. ...
-1
votes
1answer
177 views

ALB writing to 2 postgre sql instances

I have nginx and postgre sql running on the same ec2 instance. It serves a rails app that reads and writes data on that db. I would like to have 2 instances behind an ALB service to distribute load ...
1
vote
1answer
291 views

AWS: ECS/ALB setup, converting a docker-compose file, port mapping to mulitple containers

I know this is not an 'original question'. The general topic is covered extensively. Neverthless i'm struggling with my particular setup: I'm trying to basically convert the following docker-compose ...
1
vote
0answers
185 views

Persistent 502s from AWS ALB

This is our architecture: Cloudflare -> ALB 1 -> Nginx API Gateway -> ALB 2 -> (Nginx Sidecar -> Application) The application and the sidecar are on the same box and communicate via unix domain ...
2
votes
2answers
3k views

Is reverse proxy still required between AWS ALB and application server?

Context Web application with application server, i.e. Ruby on Rails with puma. Running within a container on AWS ECS with Fargate. Traffic is routed by AWS Application Load Balancer directly to ...
0
votes
2answers
3k views

Database behind AWS load balancer?

I put a load balancer in front of example.com and I believe all traffic for *.example.com goes to the load balancer My database is named db.example.com and listening at 5432 Application Load ...
1
vote
1answer
595 views

AWS alb and DNS routing

I have example.com behind ALB Since I'm using external DNS service other than route53, I created a CNAME in my DNS service such as some-unique-name.ap-northeast-2.elb.amazonaws.com pointing to ...
0
votes
1answer
751 views

How to route to Cloudfront+s3 and rest to ALB in Route53?

The project has a domain name foobar.com pointing to a legacy system, hosting and serving mainly static files. The project got more complex over time and in AWS ALB certain /routes are pointed to ...
1
vote
0answers
1k views

Istio : HTTPS Traffic converted to HTTP with port set as 443

Bug description We have setup an istio over on eks cluster & a java app is hosted in it. The pod has been created along with service with type ClusterIP We have created Virtual Service, Gateway &...
0
votes
0answers
377 views

AWS Application Load Balancer returns '412 Precondition Failed' when a conditional header is present

I have an ALB with a Lambda as a target. The lambda is a simple Python one and the only thing it does, is a return of a hardcoded dict. The response is a valid response for ALB and includes Etag ...
1
vote
0answers
213 views

AWS Application Load Balancer with https upstreams not working

Anyone help with a problem i am having with trying to configure my AWS Application Load Balancer to use an HTTPS upstream on a IIS server. Everything works fine when I set the target group to hit the ...
1
vote
0answers
474 views

Nginx proxy_pass failing when keeping EC2 behind aws ALB, 502 status error

I have 2 instances one for backend(URL: be.domain.com) and another for frontend(URL: fe.domain.com) pointed through Backend-TG and frontend-TG respectively. AWS application load balancer used to ...
2
votes
1answer
326 views

Is there a CloudWatch metric that corresponds to ALB data transfer usage/cost?

I have an Application Load Balancer whose data transfer cost I want to monitor. In Cost Explorer, I can filter on usage type "DataTransfer-Out-Bytes", and see how many GB of data it is sending, and ...
0
votes
0answers
39 views

Can a target group have more than one asg in aws?

I want a target group for an alb to be able to add a second asg. This is that so it can slowly replace the current asg.
2
votes
1answer
902 views

How to assign the same elastic IP to a NAT gateway and an ALB?

The architectural diagram shown below is taken from an AWS blog titled Task Networking in AWS Fargate. The blog was posted in January 2018. The description that comes with the image states that: ...
0
votes
1answer
1k views

application load balancer fails to upload large file

I have a bit of a problem. I have a php larvel application that sits on a ec2 linux instance behind an application load balancer. When I try to upload a large file the process fails with no error ...
-1
votes
1answer
57 views

AWS Application load balancer in switching between two frontends

I have two angular6 frontends, one running on port 4000, the second running on 4100. Do a Dockerized push to ECR and create two task definitions ... create cluster and then 2 services of these two ...
1
vote
1answer
206 views

Should I share an AWS application load balancer between applications?

I have two unrelated applications ( they are not two microservices of the same application, but two separate services ) running on Amazon Ec2 or Fargate. Should I share an application loadbalancer ...
2
votes
1answer
1k views

Why is my autoscaling group instance unhealthy?

I'm noticing a very strange issue with an AWS auto-scaling group. Instances are being reported (incorrectly) as being unhealthy. The instances are then being terminated and replaced unnecessarily. ...
3
votes
1answer
2k views

HTTP/2 for ALB with EKS on AWS

I'm experimenting with AWS EKS and have created the following setup: EKS cluster with a single service/pod/node AWS ALB ingress controller ALB I try to configure the ALB to: create access logs ...
2
votes
0answers
1k views

AWS Application Load Balancer 502 Bad Gateway

I am using AWS ECS Fargate and have an application load balancer to forward all the connections to the correct instance. I did already manage to get up a cluster and a service up and running ...