Port Forwarding to server behind Site-to-Site VPN

0

We have a VPC which is connected across a site-to-site VPN onto an Azure Environment.

Within our AWS VPN, we have a proxy server which is making calls onto a server that sits behind the VPN on Azure. That works fine, however, we have an application which requires to make calls on a specific port directly to the server, but we need to bypass our proxy as apparently it doesn't work.

So, I need to setup a public facing IP connection that will port forward calls to the server behind the VPN. Now, I was trying to use an NLB setup but when choosing the target, I can only select a subnet that is part of the VPC, but the destination target I'm trying to reach sits behind the VPN on a subnet that is routed via a Virtual Gateway.

Any idea on how I can setup Port Forwarding to a device behind the VPN? Ideally we would not setup a bastion server that would require maintenance, hoping for a serverless setup.

Thank you!

  • I'm having some trouble following what you need to do. A diagram would help; or perhaps labelling the servers (A, B, etc.) and specifically calling out the ports and application type. In general, VPNs allow transparent access between two networks; so the issue here is probably that the proxy server cannot (or doesn't support?) forwarding the traffic that you require.

1回答
0

NLB supports IP-based target groups. That would allow you to load balance to resources through the VPN connection.

profile pictureAWS
回答済み 1年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ