Questions tagged [amazon-alb]

Amazon Web Services supports three types of Load Balancers. An Application Load Balancer (ALB) functions at the application layer, the seventh layer of the Open Systems Interconnection (OSI) model.

Filter by
Sorted by
Tagged with
0 votes
1 answer
19 views

AWS ALB and Cloudfront routing 502

Slight AWS newbie here. I have just taken over a new application in AWS that has an ALB (routes traffic to ECS). The ALB has an SSL certificate and some default DNS records in Route53. I have created ...
  • 111
0 votes
0 answers
8 views

Restricting one site under Wordpress as Private in AWS ALB

I have configured multiple sites on WordPress and it is connected with internet-faced ALB under AWS. Is it possible to restrict one site as private on ALB? Remaining sites needs an public access. ...
0 votes
0 answers
6 views

AWS Cloudfront front-facing for ELB Origin

Right now I'm working with Cloudfront as front-facing for the Application Load Balancer in AWS. I attached my default Security Group (one) which has inbound rule both for HTTP and HTTPS for source 0.0....
0 votes
1 answer
27 views

How to use ALB Ingress without rewriting every helm chart?

I am trying to use ALB ingress with default helm charts, but struggle to solve simple problems with headers. In Kubernetes ingress-nginx it's easy to add annotations to add headers (CORS), but with ...
1 vote
1 answer
84 views

AWS EC2 not showing a request for IP Issue

My AWS web servers are not showing a request for example '42.26.32.120' after running some athena queries We are unable to identify the cause of the issue, as the IPs is not in any of the access logs ...
  • 19
0 votes
1 answer
29 views

AWS Application Load Balancer: Re-routing requests to non-approved paths

I have a use case where I would like all requests to start with a prefix like: https://WHATEVER/pfx For example https://WHATEVER/pfx/a and https://WHATEVER/pfx/b/c/d But I wish to prevent https://...
0 votes
1 answer
126 views

terraform: Configuring load-balancer to use dynamic port of ECS task/service in AWS

This is sort-of a general question for how dynamic port assignments are supposed to work, though my specific context is trying to figure-out if there is a natural way for a target-group to know the ...
0 votes
0 answers
78 views

Apache server behind AWS ALB - SSL working when it should not

I have a standard apache server behind AWS ALB. The ALB handles SSL however the downstream to the server is also defined as HTTPS: 443 This works well but I found that the SSL certificate on the ...
  • 1,381
0 votes
0 answers
15 views

Terminate ALB if LCU gets too high?

I am looking to deploy an API I wrote to AWS for purely learning purposes. As such I would like to ensure I stay within the free tier. As ALB billing is based on the LCU metric, is it possible to ...
1 vote
1 answer
92 views

Keycloak w/ EKS + ALB (401 after auth)

I’m currently trying to get Keycloak to run in EKS behind ALB and for the life of me, I can’t get it to work. I get the redirect to a login screen and after I log in - I instantly get presented with ...
  • 21
0 votes
4 answers
762 views

Easier way how to put AWS ALB behind Cloudfront with TLS?

I have this flow: user => Cloudfront with TLS => ALB with TLS => ECS I encrypted connection between Cloudfront and ALB. Cloudfront has domain MAIN.DOMAIN.NET + TLS cert configured. ALB has ...
  • 33
0 votes
0 answers
85 views

Unknown latency in AWS ALB

I have AWS ALB, the ALB points to containers running on ECS Fargate. The containers run Apache Tomcat. There was an instance, where the front-ends were reporting high p99 latency - 20.XXX seconds. ...
1 vote
0 answers
24 views

How to reduce the time it takes a request to pass from a ALB to the actual Fargate Server?

I have a webhook endpoint where our service provider send a payload which I have to respond to within 2 seconds. I've been getting way too many timeout errors from the service provider, meaning I wasn'...
  • 133
0 votes
0 answers
146 views

ERR_TOO_MANY_REDIRECTS using Nginx and Application load balancer

I have set up an ALB on AWS with a certificate to redirect traffic over https, in my target group I have a Nginx to do a proxypass with my target instances. Currently I have a CAS 4.0.1 application ...
0 votes
0 answers
115 views

In AWS how can I route outbound EC2 traffic through different Internet Gateways depending on the payload?

I have a weird scenario where I need to route certain outbound traffic from an app hosted on EC2 through different regional IP addresses. Long story short we have 2 clients with APIs that our app ...
  • 103
0 votes
0 answers
112 views

AWS ALB - health check to port 3306 (DB)?

I have a ALB with it's target group, the HTTP health checks are running fine. I would like to do the same to port 3306 (because we have been dealing with some issues with our DB), and maybe add to ...
0 votes
1 answer
148 views

Can you prevent routing traffic to an AWS ALB if the host is an IP address and not a domain name?

I'm running an ALB on AWS with multiple SSL certificates. The domain name is dynamically handled via the application on EC2. Currently, the ALB will route requests to the IP address of the ALB to the ...
0 votes
0 answers
129 views

ALB instead of Cloudfront in front of single server web app

AWS Recommends adding cloudfront in front of single server applications for security and performance see https://aws.amazon.com/blogs/networking-and-content-delivery/dynamic-whole-site-delivery-with-...
  • 1,381
0 votes
1 answer
145 views

Direct Traffic from a Pulbic ALB to an Internal ALB for EKS

So I have an EKS cluster sitting in a dedicated VPC (EKS-VPC) In my Main VPC I have a public-facing ALB that I want it to somehow direct traffic to services running in EKS. More specifically I want ...
0 votes
0 answers
324 views

SQS is not working for multiple ECS (fargate) instances

I am using an application load balancer, under this ALB, a target group is provided. In this target group, two fargate ECS instances are running. These two instances use the same PHP docker image. ...
  • 37
0 votes
0 answers
436 views

How to set multiple listener rules to load balancer in AWS?

I have set multiple listeners and rules for an internet-facing ALB as below The 80 port only redirect to 443. On 443, I set two kinds of different rules with different target groups. If I access /* ...
  • 137
2 votes
1 answer
4k views

Achieving mTLS with AWS ALB

If I have an ALB in my infrastructure with ECS target groups downstream, will SSL/TLS always be terminated at the ALB? If so, are my only options ELB/NLB to preserve the SSL/TLS context?
0 votes
1 answer
87 views

How to design a frontend service in AWS?

In AWS, we deployed a backend service - API in the internal ALB. For frontend(Web UI), it call the API and also needs to be accessed from internal enterprise network. It should be bind to Route53. We ...
0 votes
1 answer
893 views

AWS ALB for TCP socket connections on a custom port number?

I have an application load balancer (ALB) and a number of web servers behind it. Apart from HTTP and HTTPS, the web servers also serve long-lasting TCP socket connections on port 52345. When a client ...
2 votes
1 answer
27 views

Managing AWS EC2 and RDS autoscalling configuraiton

A client of ours generally can get away with running just the one EC2 and also has an Aurora serverless MySQL 5.7 database running, however there are times when their load spikes up significantly. e.g....
0 votes
1 answer
90 views

AWS ALB Handshake resumption

I have a problem where the AWS ALB TCP is initiated and every request which causes unnecessary latency of 0-150ms Example from postman to show what happens at every request. DNS lookup, TCP Handshake ...
  • 1
0 votes
1 answer
304 views

Do AWS WAF logs capture all traffic, or just rule matches?

I want to implement some AWS WAF rules but I need more knowledge of the quantity (origin, resource, etc) of requests that come through my loadbalancer. Can I skip ALB logs and get logs for requests to ...
  • 11
1 vote
1 answer
776 views

How to authorize only IP from a Fargate ECS service for MongoDB Atlas Cluster

I have an ECS Fargate service mapped to an Application Load Balancer on AWS. In this service, there are several task that are frequently killed and restart. These tasks should be able to connect to a ...
  • 113
1 vote
0 answers
257 views

AWS ALB and HAProxy Keep-Alive header

Has any one come across this behavior? AWS ALB is sending traffic to HaProxy. HaProxy sets keep-alive header to 29 seconds. Client connected to ALB does not see this header. It can only see "...
1 vote
0 answers
484 views

How do you route to a mix of HTTP and HTTPS backends from an ALB Ingress?

I have a Kubernetes cluster running in EKS (on AWS.) In the cluster I have Elasticsearch, Kibana and various other web services. I would like to set up a single ALB loadbalancer such that: Requests ...
  • 385
0 votes
1 answer
222 views

Configure an EC2 instance as firewall of an Application Load Balancer

My current infrastructure is basically an DNS (Route 53) -> WAF -> ALB. The WAF is in front of the load balancer with some AWS managed filters. My application is a PHP web page and an API. Now I'...
0 votes
1 answer
91 views

How to set a public LB route to a proxy on AWS?

I built this traffic route in a VPC. Route53->ACM(SSL)->Public ALB->EC2(Nginx proxy)->Private ALB->ECS(Internal App) The EC2's security group is allowing tcp 80 and 443. The ECS' ...
  • 17
0 votes
1 answer
2k views

Secure websocket connection to server running on EC2 fails

I have a node.js websocket server running on an EC2 instance on port 8080. Normal websocket connections (ws://) work fine but when I'm trying to make a secure connection (wss://), the websocket ...
0 votes
0 answers
157 views

Application Load Balancers Requests Hanging

In my aws env requests are hanging at the ALB for some reason. I haven't been able to identify a cause yet aside from Cache hanging requests there and possibly the session write being left open ...
3 votes
1 answer
555 views

Using ALB to target PHP-FPM ECS containers

I'd love to know if this is actually posible but I'm sure I've seen it demonstrated by one of our old AWS TAMs. I am serving PHP-FPM containers (port 9000) out of ECS hosting a PHP application. I am ...
0 votes
1 answer
602 views

Cloudfront 502 error with ALB origin in different region

I have a CloudFront which has one of its origins as an application load balancer, this load balancer is available in a different region from the CloudFront which is only available in N.Virginia and is ...
0 votes
1 answer
1k views

AWS ALB Shows Target Group unhealthy, even though port 80 is open to Internet

I've built an AWS ALB & Target group via Terraform and everything looks correct but the Target Group is reporting unhealthy for HTTP, HTTPS, and TCP. The instance is a t3.nano in us-east-2 and ...
0 votes
1 answer
741 views

AWS EKS Ingress Timeout On Any Non-Root Path

We have configured an Ingress resource on our EKS cluster with rewrites from /.* on the load balancer to the matching URI upstream. If we visit staging.my-domain.com/, we see a successful health-check ...
1 vote
0 answers
329 views

aws-load-balancer-controller annotations not working

I'm trying to automatically start an ALB in my EKS cluster by using the aws-load-balancer-controller This is what the logs of my deployment look like: $ kubectl logs -n kube-system deployment.apps/aws-...
  • 123
1 vote
0 answers
208 views

Apache 502 bad gateway response when using AWS Application Load Balancer and Centos 7

I am new in Linux/centos, I configured a Laravel application in my AWS EC2 Instance (Centos 7),The application was working fine but after that I configured a Application Load Balancer to use path ...
  • 11
0 votes
1 answer
159 views

AWS CodeDeploy with two listeners

I have an application load balancer with two listeners ( 80 and 443 ) and I want use CodeDeploy to deploy my fargate container. I cannot redirect http traffic to https... With CodeDeploy I can set up ...
  • 130
0 votes
1 answer
119 views

Unable to setup Apache NiFi behind AWS ALB

I am having an issue setting up Apache NiFi behind AWS ALB. I can currently access the UI when hitting the server's public IP address directly but have been unsuccessful getting it working behind the ...
2 votes
2 answers
1k views

403 when using Terraform to attach Lambda Function to Target Group w/ ALB

I'm able to create Instances, Target Groups, and ALBs just fine with Terraform, but am getting stuck when trying to use Lambda Functions. It looks like the Lambda function gets created OK along with ...
1 vote
1 answer
210 views

AWS ALB SSL/TLS offloading security

AWS ALBs allow one to configure an SSL/TLS certificate for encrypting traffic between the client and the LB. Traffic between the LB and the target can be protected with a certificate, but target ...
  • 111
0 votes
0 answers
62 views

SPA from S3 and Java backend in the same domain. ALB fixed response limit

I would like to have S3 bucked stored Single Page Application and its backend in the same domain. Now I am using ALB Listeners configuration to serve a fixed response for my index.html (by path). The ...
2 votes
1 answer
325 views

On and off requests take very long on my system

EDITED: I have and issue in my AWS system. Every few requests takes almost exactly 130 seconds to answer. When I say a few I mean 5 to 25 or so. Normally if you cancel the slow request and send again ...
  • 148
0 votes
1 answer
135 views

What could explain downtime when ALB connection count is high but request rates are low?

I have a backend service on EC2s, and requests to the EC2s are routed through an ALB. My backend service had a brief downtime during which it's response latency shot up. This led to a massive build ...
3 votes
1 answer
7k views

AWS ALB/NLB HTTPS Target with Self-Signed Cert

I am using AWS to build a service. For this service I want to use ACM certificates. The backend is running on an EC2 instance with TLS enabled using a self-signed certificate. Since ACM certificates ...
-2 votes
2 answers
155 views

Securing an AWS ALB

Hi everybody I’m relatively new to AWS web services and I’m struggling to secure an ALB. My web page works in a simple way there’s an api gateway where the methods are defined, then I have a ALB that ...
0 votes
1 answer
2k views

Remote Desktop Services Gateway behind AWS ALB connectivity issues

I have set up a Remote Desktop Services Gateway behind an AWS ALB. The AWS ALB does the SSL offloading and talks to the RDS Gateway Server via HTTP (port 80). The configuration works and I can RDP ...
  • 197