MTLS for ECS Service


I don't want to use api gateway or App Mesh for MTLS. How to implement MTLS with Load balancer ?

asked 8 months ago564 views
2 Answers

If you’re referring to mutal TLS then an NLB with a TCP listener and target group of your containers. For mTLS support, create a TCP listener instead of a TLS listener. The load balancer passes the request through as is, so you can implement mTLS on the target.

profile picture
answered 8 months ago

You can consider using a TCP -> TCP listener configuration on Network Load Balancer (NLB) or Classic Load Balancer (CLB), and implement the mTLS on the target/backend. With a TCP -> TCP listener configuration, the Elastic Load Balancer is not doing anything with TLS / Layer 7, and is instead simply forwarding packets. This means that no SSL/TLS termination will be offloaded to the ELB and the SSL/TLS negotiation will occur directly between the client and backend instance.

answered 8 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions