How does EC2 hop to a publicly accessible RDS endpoint?
0
Hey team, say I have an RDS endpoint that's publicly available. I then access this endpoint from an EC2 instance.
What happens at the network layer? Does the request go to the public internet? Ideally, the system would know that the we're inside the same vpc and hop right over. How could I confirm this?
¿Son útiles estas respuestas? Vote a favor de la respuesta correcta para ayudar a la comunidad a beneficiarse de sus conocimientos.
0
Respuesta aceptada
Assuming your ec2 instance is in the same VPC as the RDS database, then it will route using the private subnet. You can confirm this by using nslookup from the ec2 instance, you should get the private ip address.
This is a good way to check which IP address (public or private) the EC2 instance is obtaining. I'd also note that I would not be making a RDS endpoint public - that's definitely not a good security practice.
OFICIAL DE AWSActualizada hace 8 meses
This is a good way to check which IP address (public or private) the EC2 instance is obtaining. I'd also note that I would not be making a RDS endpoint public - that's definitely not a good security practice.