2 Answers
- Newest
- Most votes
- Most comments
0
EC2 will send the response to the load balancer, and then the load balancer will send the response, via the IGW, onto the client which sent the original request
0
Your understanding is correct. ALB will always change source IP to it's own private IP of the ENIs.
To capture the original client IP, you can use X-forwarded-for header.
Also, this is the reason for security best practice, on the target EC2, we only allow traffic from security group applied to ALB.
answered 2 years ago
Relevant content
- asked 2 years ago
