Questions tagged [amazon-elb]

ELB is Amazon's managed Load Balancer service, used in conjunction with its EC2 virtual machine cloud hosting service.

Filter by
Sorted by
Tagged with
0 votes
0 answers
76 views

AWS ALB inbound requests/traffic and denial of wallet attacks

Scenario: I have an AWS ALB protected by AWS WAF with lots of AWS Managed WAF Rules, rate limiting rules, etc. I'm having a hard time in understanding why, even requests blocked by WAF, are impacting ...
3 votes
1 answer
3k views

Disable AWS ELB health check

Is there a way to disable AWS ELB's health check completely? I use a logger middleware (morgan) to log all requests and it's quite annoying for health check requests to get logged every 5min.
1 vote
1 answer
55 views

How to direct https traffic from aws ELB to gke pods in gcp cloud

We are in the middle of migrating our micro services from aws to gcp cloud. Our REST api's are served via an api-gateway which internally calls the respective micro services. So ELB rules were ...
1 vote
1 answer
4k views

ELB redirect traffic from one port to another

Can AWS ELB redirect traffic from one port to another? Take this example - I have an application running on 8445 but I only want to expose port 443. I have tried this with target groups and listeners ...
0 votes
0 answers
26 views

Trigger AWS Autoscale automatically

I have an Autoscale Web Application in AWS. When I don't use it, I terminated EC2 instances automatically with Lambda (with Cloudwatch). But I couldn't find an automatic structure to trigger it again. ...
2 votes
1 answer
2k views

Access instance behind ELB through OpenVPN server

I want to redirect the traffic through an openvpn server only for some specific domains (dev.mydomain.com, admin.mydomain.com, jira.mydomain.com, etc) which are hosted on some ec2 machines and they ...
2 votes
2 answers
11k views

Achieving mTLS with AWS ALB

If I have an ALB in my infrastructure with ECS target groups downstream, will SSL/TLS always be terminated at the ALB? If so, are my only options ELB/NLB to preserve the SSL/TLS context?
0 votes
1 answer
220 views

How target group dns failover works with AWS

I currently have an AWS load balancer and it has a target group, containing an instance per AZ: 2 of these are unhealthy and I have configured the attributes of the target group so DNS failover ...
3 votes
1 answer
5k views

AWS ALB Connection Draining not Closing Connections after Deregistration Delay

I have three instances configured as targets in an ALB. Connection draining is disabled (deregistration delay set to 0 seconds). Sticky sessions are enabled for 5 minutes. I get stuck to one web ...
27 votes
11 answers
60k views

how to forward godaddy domain to ec2 load balancer

I have a domain with godaddy: example.com I have an ec2 load balancer pointing to an ec2 instance. I would like to example.com to point to my load balanced instance. I first added a www cname ...
0 votes
0 answers
56 views

Wordpress behind AWS ELB: constant 302, or not found

I have just installed a new WP under EC2, behind ELB. ELB itself is secured, however, EC2's httpd is not. Crazy Wordpress doesn't recognize it's being served on HTTPS, and installs itself in HTTP mode,...
2 votes
1 answer
208 views

How Do I Use The <VirtualHost> Directive To Host Multiple Sites Using An EC2 Instance, ELB, And CloudFront?

I've been really struggling with this for the past few days, and I'm at a lost. Here's what's going on. I have an EC2 instance (Amazon Linux 2023) behind an ELB and a CloudFront distribution that I ...
0 votes
0 answers
242 views

200 success code in Apache log but 504 error in the browser for the same request

Apache logs 200 (success) code but browser shows 504 Gateway timeout error for the same request. Also, it times out just after aws load balancer idle time out value which is 1200 (20mins). I do not ...
2 votes
1 answer
4k views

Nginx Proxy to AWS ELB not passing HTTPS protocol to Backend Instances

This is my first ever question, so please go easy on me! I'm trying to set up an Nginx proxy server to auto-generate SSL certificates using OpenResty/Lua and LetsEncrypt, within a multi-tenant SAAS ...
0 votes
1 answer
446 views

work with AWS ELB to keep websocket connections during server restarting?

So we have a server application which communicates with clients through websocket and we need to regularly upgrade our server app binary. We may have multiple server instances, I know that I can ...
0 votes
1 answer
623 views

Two EKS cluster using the same LoadBalancer

Does anybody know if it is possible (and how) to share the same ELB between two Ingress Controllers on different EKS clusters in the same VPC? I have one cluster EKS cluster already running and I just ...
0 votes
1 answer
786 views

Can't ping AWS elastic load balancer

I created Load balancer. NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE open-imis-...
1 vote
2 answers
825 views

Nginx : AWS Route 53 : ELB : naked redirect

Setup I have two rails app instances running in Opsworks Layer. I am using Route 53 and an ELB to route traffic to my Layer. Objective To redirect naked domain traffic to my www domain. chicken.com ...
0 votes
1 answer
282 views

Will aws elb address change over time?

I have created a load balancer pointing at my api instances. I got an automatically generated url which looks something like this: xxx-xx-xxxxxxxxxx.us-east-2.elb.amazonaws.com I want to connect it to ...
2 votes
1 answer
3k views

AWS Elastic Load Balancer And 408 Request Timeout

We have a scenario where we are trying to access Openfire admin console behind AWS ELB using https. The http url works fine , but the https does not work, and we see a 408 request timeout error while ...
6 votes
2 answers
6k views

High availability Bastion host - Best practices, ELB, EIP?

I am currently trying to figure out a good configuration to make a Bastion host highly available. I want to meet the following targets: The bastion host(s) need to able to withstand a Availability ...
0 votes
1 answer
317 views

How to connect cloudfront and alb?

I am trying to connect to ec2 through ALB through Cloudfront. Currently, the ALB already has one listener associated with cloudfront. So I set a listener with a different port as the origin and set ...
2 votes
1 answer
3k views

AWS - Throttling ELB HTTP Traffic

I'm running a pretty standard LAMP stack on AWS. ELB distributes traffic to a few EC2 Instances running the same application. I have an issue where periodically I receive a huge spike in HTTP ...
0 votes
1 answer
3k views

how does elb distribute the traffc to private subnet though public subnet

I just start to learning AWS for a few days. I'm confusing about the way ELB distribute the traffic which from the internet. For example, if I have four ec2, two in the public subnet and others in the ...
0 votes
1 answer
384 views

How to redirect/block IP access to Nginx

I am hosting a Website on some EC2 Instances behind an Elastic Load Balancer. The Website can be reached via the public IP of the Load Balancer. This public IP is changing frequently so I have to ...
0 votes
2 answers
2k views

Network Load Balancer to Fargate/ECS Cluster - how to map multiple ports/target groups to one service?

Here is my setup: Route53 Alias Record -> Network Load Balancer -> Fargate/ECS Cluster The containers in the cluster have their own TLS certificates and have ports 80 and 443 open. The http server ...
0 votes
1 answer
655 views

block public access to the AWS Elastic Beanstalk URL

I have a node.js app running on AWS Elastic Beanstalk. I have setup a domain pointing to a CDN distribution which is pointing to the EBS. But the web app is also accessible via the EBS URL directly. I ...
0 votes
1 answer
2k views

Remote Desktop Services Gateway behind AWS ALB connectivity issues

I have set up a Remote Desktop Services Gateway behind an AWS ALB. The AWS ALB does the SSL offloading and talks to the RDS Gateway Server via HTTP (port 80). The configuration works and I can RDP ...
9 votes
3 answers
26k views

Load Balancer on Amazon does not have secure flag set for Cookie

We have a java based application running on Amazon and have configured our Amazon ELB to connect to them successfully. However, we are seeing that the Cookie flag not set as Secure. Name Value ...
1 vote
1 answer
3k views

Amazon ELB doesn't clean up KeepAlive connections

AWS documentation mentions the following: To ensure that the load balancer is responsible for closing the connections to your instance, make sure that the value you set for the HTTP keep-alive ...
0 votes
1 answer
4k views

Secure websocket connection to server running on EC2 fails

I have a node.js websocket server running on an EC2 instance on port 8080. Normal websocket connections (ws://) work fine but when I'm trying to make a secure connection (wss://), the websocket ...
0 votes
1 answer
2k views

ELB and SSLInsecureRenegotiation

I currently have SSLInsecureRenegotiation set to off on my Apache 2.4 Amazon Linux server, but I am still failing over at SSLLabs (Secure Client-Initiated Renegotiation SUPPORTED). Do you know how ...
1 vote
1 answer
6k views

Force nginx to close connection

We have a setup that looks like this: Client -> AWS ELB (tcp load balancing)-> NGINX (ssl termination) -> application server. We want to gracefully take application servers out of the load balancer. ...
5 votes
1 answer
2k views

EC2 VPC Intermittent outbound connection timeouts

My production web service consists of: Auto-scaling group Network loadbalancer (ELB) 2x EC2 instances as web servers This configuration was running fine until yesterday when one of the EC2 instances ...
1 vote
2 answers
1k views

Why should Cloudflare LB point to another AWS/GC/etc. LB?

I am aware Cloudflare has a security focus, but considering it also provides load balancing, why should I have it point to yet another load balancer e.g. AWS ELB?
1 vote
1 answer
3k views

TTFB on AWS EC2 Instance is Very Slow

I'm very new to hosting/server administration and my employer ask me to use this chance to learn and find a way to update our current hosting setup. Our current setup was one EC2 instance that hosted ...
1 vote
2 answers
8k views

Can't set http-only and secure cookies in Apache

My website is on Apache which is hosted in AWS VPS. I tried setting http-only flag and secure flag by editing security.conf file but upon checking the headers via https://hackertarget.com/http-header-...
0 votes
0 answers
721 views

Nginx revers proxy getting timeout error issue

I have an AWS elb loadbalancer with three dynamic IPs and domain- example.com, port 443. our client wants to access API but he had outbound firewall rules which required to whitelist dynamic IPs every ...
9 votes
3 answers
3k views

Apache DirectorySlash redirects HTTPS requests back to HTTP

User Request: https://www.example.com/test HTTPS requests --> AWS ELB HTTPS Listener --> Apache HTTP Apache getting http://www.example.com/test Apache redirect it to http://www.example.com/...
-1 votes
2 answers
6k views

Why AWS classic ELB with HTTP protocol doesn't work with websockets? [closed]

I know that there is an ALB and NLB option that works with websockets. I can't understand why classic ELB with HTTP protocol doesn't work with websocket connections, although at the instance there is ...
0 votes
1 answer
1k views

How can I find out why AWS ELB believes my service is failing?

I have a service which is registered with two target groups : alb and wwwalb. The alb target group is for internal requests, and the wwwalb target group is for external requests. When I deploy my ...
1 vote
1 answer
1k views

Is a NAT gateway used when traffic travels over a public application load balancer?

I'm working on the following AWS setup : [public application load balancer] -> [fargate service on private subnet w/NAT gateway] The application load balancer is associated with all three private ...
3 votes
1 answer
2k views

How to get HTTP/2 working with a AWS ALB and Tomcat 9

So I'm having difficultly getting HTTP/2 working with the newer version of the AWS Application Load Balancer, and Tomcat 9. I added the <UpgradeProtocol className="org.apache.coyote.http2....
3 votes
2 answers
2k views

"edit health check" is greyed out on AWS EC2 Load Balancers

The default AWS EC2 Load Balancer Health Check hits "/" but I'd rather have it hit somewhere where. In the Load Balancer settings the "edit health check" is greyed out and I'm not ...
9 votes
2 answers
9k views

How to block Nginx access log statements from specific user agents

I am looking to turn off logging in the Nginx access log file from specific requests from http user agents. Basically from the Amazon ELB Health Check and our external (Pingdom) monitoring. Since ...
0 votes
1 answer
633 views

AWS Fargate Load Balancer timing out

I'm setting up an AWS ECS/Fargate cluster/service/task with a load balancer for the first time. I believe the task is good since I can go to the task's (public) IP directly in a browser and see the ...
1 vote
2 answers
112 views

What does it mean when a request specifies its SSL protocol as 'TLSv1'?

I'd like to upgrade my AWS ELBs to a security policy that only allows TLS v1.2. Before doing this, I wanted to check the ELB logs to ensure that no current customers are using older versions. My ELB ...
0 votes
0 answers
47 views

Apache/AWS: How to identify local instance requests from the same VPC

In this configuration the apache server instances are all in the same VPC (across several subnets) and all incoming requests are managed via an elastic load balancer, (with ProxyProtocol=On on each ...
1 vote
1 answer
2k views

Why is a post/upload of a 100k JSON file to an AWS CloudFront endpoint resulting in 504 error?

On a wordpress site, we have requests coming in to CloudFront, which sends the request to origin (if necessary) which goes through an ELB, and to two or three instances that will service the request. ...
1 vote
1 answer
3k views

NGINX failing once a week, responds with 499 until NIGNX reload

I have an NGINX instance set up acting as a reverse proxy for several applications, each setup as their own server within the NGINX config. The configuration is currently very minimal: listen ...

1
2 3 4 5
12