Port Forwarding to server behind Site-to-Site VPN

0

We have a VPC which is connected across a site-to-site VPN onto an Azure Environment.

Within our AWS VPN, we have a proxy server which is making calls onto a server that sits behind the VPN on Azure. That works fine, however, we have an application which requires to make calls on a specific port directly to the server, but we need to bypass our proxy as apparently it doesn't work.

So, I need to setup a public facing IP connection that will port forward calls to the server behind the VPN. Now, I was trying to use an NLB setup but when choosing the target, I can only select a subnet that is part of the VPC, but the destination target I'm trying to reach sits behind the VPN on a subnet that is routed via a Virtual Gateway.

Any idea on how I can setup Port Forwarding to a device behind the VPN? Ideally we would not setup a bastion server that would require maintenance, hoping for a serverless setup.

Thank you!

  • I'm having some trouble following what you need to do. A diagram would help; or perhaps labelling the servers (A, B, etc.) and specifically calling out the ports and application type. In general, VPNs allow transparent access between two networks; so the issue here is probably that the proxy server cannot (or doesn't support?) forwarding the traffic that you require.

1 Antwort
0

NLB supports IP-based target groups. That would allow you to load balance to resources through the VPN connection.

profile pictureAWS
beantwortet vor einem Jahr

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen