Connectivity problem

0

Today we have configured rules per IP (ACL) for a company hosts. We obtain the ips from the resolution of names of the DNS delivered by the company

aXXX.XXX.com

api-pf.XXX.XXX.com

XXX.XXX.com

These domain names are not always accessing the same ips and this causes problems, if we configure IP-X and then that domain changes to IP-Y we have connectivity problems

What i can do for resolve that ?

질문됨 2년 전819회 조회
1개 답변
0

Hello there,

It is highly possible that the instances hosting the domains need Elastic IPs which allows the instances to have static ip addresses. About Elastic IPs, refer to reference [1].

Another way to solve this problem would be to involve entering the whitelist into the router’s configuration interface or editing the firewall rules on your computer.

Consider the following factors when implementing whitelisting on your Firewall:

  1. Whitelist based on domain name rather than ip address if your firewall allows.
  2. If the firewall does not support domain whitelisting but only supports ip whitelisting, consider having a static IP mapped to the domain.

If the domain is pointing to a resource such as an Application Load Balancer (ALB) or Classic Load Balancer (CLB), its IP address will keep changing due to scaling events.

  • High traffic causes ALB/CLB to scale up adding more nodes hence more ips.

If the domain is pointing to the ALB consider:

 i. Network Load Balancer (NLB) infront of ALB, see reference [2].

 ii. AWS Global Accelerator (GA) infront of the ALB, see reference [3].

 iii. If it's CLB migrate to ALB or NLB ,see reference [4].

References:

[1] https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-ip-addresses-eip.html

[2] https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-network-load-balancer.html

[3] https://docs.aws.amazon.com/global-accelerator/latest/dg/about-accelerators.alb-accelerator.html

[4] https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/migrate-classic-load-balancer.html

답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠