EC2s in an Autoscaling group across 2 subnets in same VPC can't connect to each other

0

Hi, I am trying to install MariaDB Galera on 2 EC2s in an Autoscaling group across 2 subnets in the same private VPC. I need the EC2s to connect to each other but they can't even ping each other using their private IP addresses. There is no NACLs and I have opened all ports to the same Security Group that these 2 EC2s use.

For reference, here's the guide I am using.

https://galeracluster.com/library/training/tutorials/galera-on-aws.html

Any advice?

3 réponses
0

Hi, you may have an issue in the configuration of the route tables associated to your subnets. Each of them has its own routing table which must contain a route to the other subnet.

See https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html

Your VPC has an implicit router, and you use route tables to control where network 
traffic is directed. Each subnet in your VPC must be associated with a route table, 
which controls the routing for the subnet (subnet route table). You can explicitly 
associate a subnet with a particular route table.

Best,

Didier

profile pictureAWS
EXPERT
répondu il y a 9 mois
  • Hi, the 2 subnets have the same route table with the VPC IP range set as the target. So, don't think this is the issue

0

Hi,

Could you please verify the following in the NACL and route table attached to your subnet?

  • NACL - Allows all traffic or relevant ports/protocols in both inbound and outbound
  • Route Table - Allows traffic to the VPC or subnets

Additionally, the document you shared, mentions enabling the firewall in the instances. Assuming you did this could you try disabling the firewall and try connecting to test if the issue is related to the firewall rules?

profile picture
Bisina
répondu il y a 9 mois
0

Does the SG for the EC2 instance you're pinging from have an outbound (egress) rule allowing Ping? Also you said you opened all ports but is that just TCP ports? You need ICMP for Ping.

EXPERT
répondu il y a 9 mois

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions