Questions tagged [aws-nlb]

86 questions
7
votes
2 answers

kubernetes ingress-controller `400 Bad request - plain HTTP request sent to HTTPS port`

I have a AWS NLB ingress-controller and an ingress rule which routes traffic between an API and an SPA. The ingress-controller works perfectly on HTTP, but on HTTPS I'm getting a 400 Bad request - plain HTTP request sent to HTTPS port If I…
gutscdav000
  • 359
  • 1
  • 3
  • 14
5
votes
1 answer

AWS Network Load Balancer SSL passthrough

I'm trying to secure full e2e connection between clients and my backend servers. This is how my current infrastructure looks like: Fargate cluster with my backend apps placed inside private subnets. They are fronted by internal network load…
Jarek Godwin
  • 61
  • 1
  • 3
4
votes
1 answer

Is it possible in AWS to put a Network Load Balancer in front of the API Gateway that has private endpoints?

I have the following challenge: we have a VPC with an ApiGateway::RestApi with PRIVATE endpoints (they are only accessible via the VPC,- this is our client's requirement). So the idea is that NLB (accessible from anywhere in the world) will…
Viktor
  • 380
  • 5
  • 14
4
votes
2 answers

How do I configure an AWS Network Load Balancer to preserve client IP addresses using Terraform?

The AWS console allows an NLB target group to be configured to preserve client IP addresses: However, this setting doesn't appear to be available in Terraform's load balancer target…
davidm_uk
  • 658
  • 6
  • 19
3
votes
0 answers

How to setup AWS Network Load Balancer (NLB) with TLS termination for Grpc service running in EKS?

I'm using AWS Load Balancer Controller for setup AWS NLB with TLS termination for Grpc service (grpc-dotnet implementation) running in EKS. Traffic between NLB and Pod in EKS is unencrypted. I also tried to set it up in UI but it ends with same…
3
votes
1 answer

Reset count metrics in AWS Network Load Balancer?

We have deployed Network Load Balancer target to nginx webserver using PHP-FPM. We are receiving various reset count shown in below image. Could any one help understanding these counts?
Hitesh
  • 132
  • 1
  • 9
3
votes
0 answers

How to combine network load balancers in eks?

I have an EKS with fargate alone setup with 3 microservices exposed via NLB each using AWS Load balancer controller to the API Gateway using the VPC links for REST APIs. I was asked to maintain a single LB for the three services. So I have tried the…
3
votes
1 answer

How to use aws nlb with nginx ingress controller for ssl

I have attached AWS ACM provided SSL certificate to NLB. NLB will forward request to nginx ingress. Nginx is giving me the following error. The plain HTTP request was sent to HTTPS port. I have set the following annotation in nginx…
Akshay Gopani
  • 473
  • 4
  • 16
3
votes
0 answers

MSK bootstrap server endpoint fixed between cluster recreations

What would be the recommended way to achieve static ip addres or DNS A record or alias for brokers that does not change on MSK cluster recreation? Considering how rare this is supposed to happen, putting an NLB in front of it seems like an overkill…
hdjur_jcv
  • 686
  • 1
  • 12
  • 30
3
votes
1 answer

AWS's Proxy Protocol v2 Breaking Application Due to Absence of PSH Flag

I have a network application built using Netty. The application is behind Amazon network load balancer. I now want to be able to retrieve the original client IP address, so I turned on the Proxy Protocol v2 setting on the network load…
dade
  • 3,340
  • 4
  • 32
  • 53
3
votes
3 answers

EKS ingress-nginx and NLB with https redirect

I'm having issues with the nlb lately, it was quite an adventure to have nlb with https termination on the lb working with a redirection http=>https and an ingress-nginx on EKS. Now, I want to have the X-Forwarded headers passed to the pod, but that…
night-gold
  • 2,202
  • 2
  • 20
  • 31
3
votes
1 answer

AWS NLB + NGINX Ingress + websockets == 502 Bad Gateway or Bad Handshake

Ingress controller configuration (no changes to the file below) https://raw.githubusercontent.com/kubernetes/ingress-nginx/controller-v0.41.2/deploy/static/provider/aws/deploy.yaml Service kind: Service apiVersion: v1 metadata: name:…
DmitrySemenov
  • 9,204
  • 15
  • 76
  • 121
2
votes
1 answer

Create an internal Network load balancer with AWS Copilot

I am trying to deploy bitnami/openldap container in ECS using AWS Copilot as a backend service with a internal NLB (Couldn't go with ALB since bitnami/openldap does not have a http healthcheck endpoint). I have the following config in Copilot…
2
votes
0 answers

AWS Network Load Balancer (NLB) with IPv6 dual-stack did not support UDP listeners

Is there any workarounds with AWS NLB to support UDP listeners with IPv6? I need dual-stack NLB (supports IPv6) and add UDP listener to this NLB. But it's not supported by AWS. Does any have this issue? What can be done at this point. I know that I…
2
votes
1 answer

TCP Listener VS TLS Listener

I was checking to add a Listener for my AWS network load balancer, was exploring the TLS option as TLS operates over a TCP connection for data encryption. But then read this in the AWS docs: "If you need to pass encrypted traffic through to the…
DSi
  • 93
  • 6
1
2 3 4 5 6