Question 260272 in Amazon Web Sevices Question posted in
The official Amazon Web Services documentation can be found here.

Amazon web services – AWS Client IP preservation in a NLB

We have a network load balancer in AWS with client IP preservation enabled (this is required). The NLB does not have any security group associated. So we will authorize in the security group of the target instances the client IPs.

But that does not make sense for us to authorize the flow to the NLB as well as to the target instances.
Is there anything we could do to prevent the client connecting directly to the target instances ?

Tags:

2

Answers


  1. 0

    Is there anything we could do to prevent the client connecting directly to the target instances ?

    Put the target instances in a private subnet so they can’t be accessed directly.

    Login or Signup to reply.
  2. 0

    As Mark suggested, you can put target instance in private subnet.
    Or now AWS NLB supports security groups but only newly created NLB supports SG.
    Reference link: https://aws.amazon.com/about-aws/whats-new/2023/08/network-load-balancer-supports-security-groups/

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search