Questions tagged [amazon-elb]
ELB is Amazon's managed Load Balancer service, used in conjunction with its EC2 virtual machine cloud hosting service.
556
questions
0
votes
0
answers
76
views
AWS ALB inbound requests/traffic and denial of wallet attacks
Scenario: I have an AWS ALB protected by AWS WAF with lots of AWS Managed WAF Rules, rate limiting rules, etc.
I'm having a hard time in understanding why, even requests blocked by WAF, are impacting ...
3
votes
1
answer
3k
views
Disable AWS ELB health check
Is there a way to disable AWS ELB's health check completely? I use a logger middleware (morgan) to log all requests and it's quite annoying for health check requests to get logged every 5min.
1
vote
1
answer
55
views
How to direct https traffic from aws ELB to gke pods in gcp cloud
We are in the middle of migrating our micro services from aws to gcp cloud. Our REST api's are served via an api-gateway which internally calls the respective micro services.
So ELB rules were ...
1
vote
1
answer
4k
views
ELB redirect traffic from one port to another
Can AWS ELB redirect traffic from one port to another? Take this example - I have an application running on 8445 but I only want to expose port 443. I have tried this with target groups and listeners ...
0
votes
0
answers
26
views
Trigger AWS Autoscale automatically
I have an Autoscale Web Application in AWS. When I don't use it, I terminated EC2 instances automatically with Lambda (with Cloudwatch). But I couldn't find an automatic structure to trigger it again.
...
2
votes
1
answer
2k
views
Access instance behind ELB through OpenVPN server
I want to redirect the traffic through an openvpn server only for some specific domains (dev.mydomain.com, admin.mydomain.com, jira.mydomain.com, etc) which are hosted on some ec2 machines and they ...
2
votes
2
answers
11k
views
Achieving mTLS with AWS ALB
If I have an ALB in my infrastructure with ECS target groups downstream, will SSL/TLS always be terminated at the ALB?
If so, are my only options ELB/NLB to preserve the SSL/TLS context?
0
votes
1
answer
220
views
How target group dns failover works with AWS
I currently have an AWS load balancer and it has a target group, containing an instance per AZ: 2 of these are unhealthy and I have configured the attributes of the target group so DNS failover ...
3
votes
1
answer
5k
views
AWS ALB Connection Draining not Closing Connections after Deregistration Delay
I have three instances configured as targets in an ALB. Connection draining is disabled (deregistration delay set to 0 seconds). Sticky sessions are enabled for 5 minutes.
I get stuck to one web ...
27
votes
11
answers
60k
views
how to forward godaddy domain to ec2 load balancer
I have a domain with godaddy: example.com
I have an ec2 load balancer pointing to an ec2 instance.
I would like to example.com to point to my load balanced instance.
I first added a www cname ...
0
votes
0
answers
56
views
Wordpress behind AWS ELB: constant 302, or not found
I have just installed a new WP under EC2, behind ELB.
ELB itself is secured, however, EC2's httpd is not.
Crazy Wordpress doesn't recognize it's being served on HTTPS, and installs itself in HTTP mode,...
2
votes
1
answer
208
views
How Do I Use The <VirtualHost> Directive To Host Multiple Sites Using An EC2 Instance, ELB, And CloudFront?
I've been really struggling with this for the past few days, and I'm at a lost. Here's what's going on.
I have an EC2 instance (Amazon Linux 2023) behind an ELB and a CloudFront distribution that I ...
0
votes
0
answers
242
views
200 success code in Apache log but 504 error in the browser for the same request
Apache logs 200 (success) code but browser shows 504 Gateway timeout error for the same request.
Also, it times out just after aws load balancer idle time out value which is 1200 (20mins).
I do not ...
2
votes
1
answer
4k
views
Nginx Proxy to AWS ELB not passing HTTPS protocol to Backend Instances
This is my first ever question, so please go easy on me!
I'm trying to set up an Nginx proxy server to auto-generate SSL certificates using OpenResty/Lua and LetsEncrypt, within a multi-tenant SAAS ...
0
votes
1
answer
446
views
work with AWS ELB to keep websocket connections during server restarting?
So we have a server application which communicates with clients through websocket and we need to regularly upgrade our server app binary. We may have multiple server instances, I know that I can ...
0
votes
1
answer
623
views
Two EKS cluster using the same LoadBalancer
Does anybody know if it is possible (and how) to share the same ELB between two Ingress Controllers on different EKS clusters in the same VPC?
I have one cluster EKS cluster already running and I just ...
0
votes
1
answer
787
views
Can't ping AWS elastic load balancer
I created Load balancer.
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
open-imis-...
1
vote
2
answers
825
views
Nginx : AWS Route 53 : ELB : naked redirect
Setup
I have two rails app instances running in Opsworks Layer.
I am using Route 53 and an ELB to route traffic to my Layer.
Objective
To redirect naked domain traffic to my www domain.
chicken.com ...
0
votes
1
answer
282
views
Will aws elb address change over time?
I have created a load balancer pointing at my api instances. I got an automatically generated url which looks something like this:
xxx-xx-xxxxxxxxxx.us-east-2.elb.amazonaws.com
I want to connect it to ...
2
votes
1
answer
3k
views
AWS Elastic Load Balancer And 408 Request Timeout
We have a scenario where we are trying to access Openfire admin console behind AWS ELB using https. The http url works fine , but the https does not work, and we see a 408 request timeout error while ...
6
votes
2
answers
6k
views
High availability Bastion host - Best practices, ELB, EIP?
I am currently trying to figure out a good configuration to make a Bastion host highly available. I want to meet the following targets:
The bastion host(s) need to able to withstand a Availability ...
0
votes
1
answer
317
views
How to connect cloudfront and alb?
I am trying to connect to ec2 through ALB through Cloudfront.
Currently, the ALB already has one listener associated with cloudfront.
So I set a listener with a different port as the origin and set ...
2
votes
1
answer
3k
views
AWS - Throttling ELB HTTP Traffic
I'm running a pretty standard LAMP stack on AWS. ELB distributes traffic to a few EC2 Instances running the same application.
I have an issue where periodically I receive a huge spike in HTTP ...
0
votes
1
answer
3k
views
how does elb distribute the traffc to private subnet though public subnet
I just start to learning AWS for a few days. I'm confusing about the way ELB distribute the traffic which from the internet. For example, if I have four ec2, two in the public subnet and others in the ...
0
votes
1
answer
384
views
How to redirect/block IP access to Nginx
I am hosting a Website on some EC2 Instances behind an Elastic Load Balancer. The Website can be reached via the public IP of the Load Balancer. This public IP is changing frequently so I have to ...
0
votes
2
answers
2k
views
Network Load Balancer to Fargate/ECS Cluster - how to map multiple ports/target groups to one service?
Here is my setup:
Route53 Alias Record -> Network Load Balancer -> Fargate/ECS Cluster
The containers in the cluster have their own TLS certificates and have ports 80 and 443 open. The http server ...
0
votes
1
answer
655
views
block public access to the AWS Elastic Beanstalk URL
I have a node.js app running on AWS Elastic Beanstalk. I have setup a domain pointing to a CDN distribution which is pointing to the EBS. But the web app is also accessible via the EBS URL directly. I ...
0
votes
1
answer
2k
views
Remote Desktop Services Gateway behind AWS ALB connectivity issues
I have set up a Remote Desktop Services Gateway behind an AWS ALB.
The AWS ALB does the SSL offloading and talks to the RDS Gateway Server via HTTP (port 80).
The configuration works and I can RDP ...
9
votes
3
answers
26k
views
Load Balancer on Amazon does not have secure flag set for Cookie
We have a java based application running on Amazon and have configured our Amazon ELB to connect to them successfully.
However, we are seeing that the Cookie flag not set as Secure.
Name Value ...
1
vote
1
answer
3k
views
Amazon ELB doesn't clean up KeepAlive connections
AWS documentation mentions the following:
To ensure that the load balancer is responsible for closing the
connections to your instance, make sure that the value you set for the
HTTP keep-alive ...
0
votes
1
answer
4k
views
Secure websocket connection to server running on EC2 fails
I have a node.js websocket server running on an EC2 instance on port 8080. Normal websocket connections (ws://) work fine but when I'm trying to make a secure connection (wss://), the websocket ...
0
votes
1
answer
2k
views
ELB and SSLInsecureRenegotiation
I currently have SSLInsecureRenegotiation set to off on my Apache 2.4 Amazon Linux server, but I am still failing over at SSLLabs (Secure Client-Initiated Renegotiation SUPPORTED). Do you know how ...
1
vote
1
answer
6k
views
Force nginx to close connection
We have a setup that looks like this:
Client -> AWS ELB (tcp load balancing)-> NGINX (ssl termination) -> application server.
We want to gracefully take application servers out of the load balancer. ...
5
votes
1
answer
2k
views
EC2 VPC Intermittent outbound connection timeouts
My production web service consists of:
Auto-scaling group
Network loadbalancer (ELB)
2x EC2 instances as web servers
This configuration was running fine until yesterday when one of the EC2 instances ...
1
vote
2
answers
1k
views
Why should Cloudflare LB point to another AWS/GC/etc. LB?
I am aware Cloudflare has a security focus, but considering it also provides load balancing, why should I have it point to yet another load balancer e.g. AWS ELB?
1
vote
1
answer
3k
views
TTFB on AWS EC2 Instance is Very Slow
I'm very new to hosting/server administration and my employer ask me to use this chance to learn and find a way to update our current hosting setup.
Our current setup was one EC2 instance that hosted ...
1
vote
2
answers
8k
views
Can't set http-only and secure cookies in Apache
My website is on Apache which is hosted in AWS VPS.
I tried setting http-only flag and secure flag by editing security.conf file but upon checking the headers via https://hackertarget.com/http-header-...
0
votes
0
answers
721
views
Nginx revers proxy getting timeout error issue
I have an AWS elb loadbalancer with three dynamic IPs and domain- example.com, port 443.
our client wants to access API but he had outbound firewall rules which required to whitelist dynamic IPs every ...
9
votes
3
answers
3k
views
Apache DirectorySlash redirects HTTPS requests back to HTTP
User Request: https://www.example.com/test
HTTPS requests --> AWS ELB HTTPS Listener --> Apache HTTP
Apache getting http://www.example.com/test
Apache redirect it to http://www.example.com/...
-1
votes
2
answers
6k
views
Why AWS classic ELB with HTTP protocol doesn't work with websockets? [closed]
I know that there is an ALB and NLB option that works with websockets. I can't understand why classic ELB with HTTP protocol doesn't work with websocket connections, although at the instance there is ...
0
votes
1
answer
1k
views
How can I find out why AWS ELB believes my service is failing?
I have a service which is registered with two target groups : alb and wwwalb.
The alb target group is for internal requests, and the wwwalb target group is for external requests.
When I deploy my ...
1
vote
1
answer
1k
views
Is a NAT gateway used when traffic travels over a public application load balancer?
I'm working on the following AWS setup :
[public application load balancer] -> [fargate service on private subnet w/NAT gateway]
The application load balancer is associated with all three private ...
3
votes
1
answer
2k
views
How to get HTTP/2 working with a AWS ALB and Tomcat 9
So I'm having difficultly getting HTTP/2 working with the newer version of the AWS Application Load Balancer, and Tomcat 9. I added the <UpgradeProtocol className="org.apache.coyote.http2....
3
votes
2
answers
2k
views
"edit health check" is greyed out on AWS EC2 Load Balancers
The default AWS EC2 Load Balancer Health Check hits "/" but I'd rather have it hit somewhere where. In the Load Balancer settings the "edit health check" is greyed out and I'm not ...
9
votes
2
answers
9k
views
How to block Nginx access log statements from specific user agents
I am looking to turn off logging in the Nginx access log file from specific requests from http user agents.
Basically from the Amazon ELB Health Check and our external (Pingdom) monitoring. Since ...
0
votes
1
answer
633
views
AWS Fargate Load Balancer timing out
I'm setting up an AWS ECS/Fargate cluster/service/task with a load balancer for the first time.
I believe the task is good since I can go to the task's (public) IP directly in a browser and see the ...
1
vote
2
answers
112
views
What does it mean when a request specifies its SSL protocol as 'TLSv1'?
I'd like to upgrade my AWS ELBs to a security policy that only allows TLS v1.2.
Before doing this, I wanted to check the ELB logs to ensure that no current customers are using older versions.
My ELB ...
0
votes
0
answers
47
views
Apache/AWS: How to identify local instance requests from the same VPC
In this configuration the apache server instances are all in the same VPC (across several subnets) and all incoming requests are managed via an elastic load balancer, (with ProxyProtocol=On on each ...
1
vote
1
answer
2k
views
Why is a post/upload of a 100k JSON file to an AWS CloudFront endpoint resulting in 504 error?
On a wordpress site, we have requests coming in to CloudFront, which sends the request to origin (if necessary) which goes through an ELB, and to two or three instances that will service the request.
...
1
vote
1
answer
3k
views
NGINX failing once a week, responds with 499 until NIGNX reload
I have an NGINX instance set up acting as a reverse proxy for several applications, each setup as their own server within the NGINX config.
The configuration is currently very minimal:
listen ...