AWS Service/Product/Solution

0

Let's assume I don't have any AWS resources at the moment. Is there a way to acquire a public IP from AWS, point my personal FQDN A record to the AWS public IP and in the back end have that routed to a variety of public IPs at my own data center in a failover configuration? I understand part of this may be possible using Route 53.

asked 2 years ago193 views
4 Answers
0

Hello, It depends on the use-case of the public IP. You can open up a support Ticket and request the same and also explain the detailed use-case and how it would help the team or ease the onboarding towards the AWS. also, it depends on the type of Support plan you have to get to the right person in the accounts team. Without the use-case, it is unlikely to get the same. Hope this helps.

profile pictureAWS
SUPPORT ENGINEER
answered 2 years ago
0

One way to accomplish this would be CloudFront, however you would not have a static public IP.

  1. Create a CloudFront distribution with multiple Origins in an Origin Group. The Origin points to your DC.
  2. Set up your FQDN as a CNAME to the CloudFront Distribution, assuming your own DNS here.
  3. Set the caching policy to NoCache if you are serving up dynamic content

You could also use Route 53 to host the FQDN and use health checks with primary and secondary pointing your your DC.

profile pictureAWS
EXPERT
kentrad
answered 2 years ago
0

It seems the Elastic Load Balance may do this in conjunction with Route53 but I'm still trying to connect the pieces together to see if it'll actually work like I think it will.

answered 2 years ago
0

You can definitely do this with private IP addresses. Consider a (very primitive) network diagram:

Web client -> AWS Public IP -> Application Load Balancer -> VPN -> On premises router -> On premises host

Here, we take the traffic from the load balancer, carry it across the VPN to your data centre where it is delivered to the host. This is possible because ALB can have targets which are defined purely by IP address.

You can also replace the VPN with a Direct Connect service.

You cannot, however, point ALB to a public IP address.

As per one of the other answers here, a better solution would be to use CloudFront with the caveat that it wouldn't be a single, static IP address. But there are other benefits such as WAF, caching and request modification if you need it.

profile pictureAWS
EXPERT
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions