Port Forwarding to server behind Site-to-Site VPN

0

We have a VPC which is connected across a site-to-site VPN onto an Azure Environment.

Within our AWS VPN, we have a proxy server which is making calls onto a server that sits behind the VPN on Azure. That works fine, however, we have an application which requires to make calls on a specific port directly to the server, but we need to bypass our proxy as apparently it doesn't work.

So, I need to setup a public facing IP connection that will port forward calls to the server behind the VPN. Now, I was trying to use an NLB setup but when choosing the target, I can only select a subnet that is part of the VPC, but the destination target I'm trying to reach sits behind the VPN on a subnet that is routed via a Virtual Gateway.

Any idea on how I can setup Port Forwarding to a device behind the VPN? Ideally we would not setup a bastion server that would require maintenance, hoping for a serverless setup.

Thank you!

  • I'm having some trouble following what you need to do. A diagram would help; or perhaps labelling the servers (A, B, etc.) and specifically calling out the ports and application type. In general, VPNs allow transparent access between two networks; so the issue here is probably that the proxy server cannot (or doesn't support?) forwarding the traffic that you require.

1 Answer
0

NLB supports IP-based target groups. That would allow you to load balance to resources through the VPN connection.

profile pictureAWS
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions