Connectivity issues from Public NLB to Fargate container UDP port

0

I have a public NLB with some TCP and UDP listeners and a fargate container which listens on UDP port 8001 which is hosted in same VPC as NLB. A target group is attached to NLB listener UDP:8001 using UDP protocol and healthcheck is provided through a TCP port 1024 on fargate container. Security groups for Target group, NLB and Container allow UDP 8001 inbound and outbound traffic. But container is not receiving any packets on UDP port. This container also has TCP listeners which are working are working fine.

I only want to achieve the UDP port connection from public to ECS container through NLB.

Any help is much appreciated. Thanks

질문됨 2달 전177회 조회
1개 답변
0

Do you have a security group on the NLB? If so also ensure inbound 8001 UDP is allowed.

profile picture
전문가
답변함 2달 전
profile picture
전문가
검토됨 2달 전
  • Yes, I have a security group attached to NLB which allows inbound and outbound traffic to 8001 port.

  • Can you share the task definition?

  • Here is my task definition:

    {
        "taskDefinitionArn": "arn:aws:ecs:ap-southeast-2:xxxx:task-definition/rollover:21",
        "containerDefinitions": [
            {
                "name": "rollover",
                "image": "xxxx.dkr.ecr.ap-southeast-2.amazonaws.com/rollover:latest",
                "cpu": 0,
                "portMappings": [
                    {
                        "containerPort": 8001,
                        "hostPort": 8001,
                        "protocol": "udp"
                    }
                ],
                "essential": true,
                "environment": [],
                "mountPoints": [],
                "volumesFrom": [],
                "secrets": [
                    
                ],
                "logConfiguration": {
                    "logDriver": "awslogs",
                    "options": {
                        "awslogs-create-group": "true",
                        "awslogs-group": "rollover",
                        "awslogs-region": "ap-southeast-2",
                        "awslogs-stream-prefix": "ecs"
                    }
                },
                "healthCheck": {
                    "command": [
                        "CMD-SHELL",
                        "nc -uzv localhost 8001 || exit 1"
                    ],
                    "interval": 60,
                    "timeout": 50,
                    "retries": 3,
                    "startPeriod": 60
                },
                "systemControls": []
            },
            {
                "name": "healthcheck",
                "image": "busybox:latest",
                "cpu": 0,
                "portMap
    

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠