How does EC2 hop to a publicly accessible RDS endpoint?
0
Hey team, say I have an RDS endpoint that's publicly available. I then access this endpoint from an EC2 instance.
What happens at the network layer? Does the request go to the public internet? Ideally, the system would know that the we're inside the same vpc and hop right over. How could I confirm this?
Queste risposte sono utili? Dai un voto positivo alla risposta corretta per aiutare la community a trarre vantaggio dalle tue conoscenze.
0
Risposta accettata
Assuming your ec2 instance is in the same VPC as the RDS database, then it will route using the private subnet. You can confirm this by using nslookup from the ec2 instance, you should get the private ip address.
This is a good way to check which IP address (public or private) the EC2 instance is obtaining. I'd also note that I would not be making a RDS endpoint public - that's definitely not a good security practice.
AWS UFFICIALEAggiornata 3 anni fa
This is a good way to check which IP address (public or private) the EC2 instance is obtaining. I'd also note that I would not be making a RDS endpoint public - that's definitely not a good security practice.