Using NLB as a listener for HTTPS

Question

Hi,
Is it possible to define a NLB as an HTTPS endpoint, terminating SSL and forwarding traffic to an EKS cluster? (Assuming I don't need URL routing)
I'm trying to figure out which option would be cheaper, ALB or NLB, assuming both are possible.

Thank you!

Accepted Answer

Yes it would be possible to terminate HTTPS (TLS) traffic with NLB, by using a TLS listener as documented [here](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html).

Generally speaking, we could think about if ALB's layer 7 features such as WAF or [Advanced Request Routing](https://aws.amazon.com/blogs/aws/new-advanced-request-routing-for-aws-application-load-balancers/) would be of help, otherwise LCU cost of NLB is slightly cheaper than ALB from the connections perspective. Refer to the [pricing](https://aws.amazon.com/elasticloadbalancing/pricing/) page for more details.

Using NLB as a listener for HTTPS

Contenuto pertinente