Using Transfer Family to send and receive messages over HTTPS - Health status for ALB

Hello Vlad,

Step-by-Step Guide to Configuring Health Check for AWS Transfer Family Server Create the Target Group:

• In the AWS Management Console, navigate to the EC2 Dashboard.
• Under Load Balancing, choose Target Groups.
• Click on Create target group.
• Select Instances or IP as the target type (depending on your setup).
• For Protocol, choose HTTPS.
• Enter other details such as target group name and VPC.

Configure Health Checks:

• In the Health checks section, choose HTTP or HTTPS for the Health check protocol.
• Set the Health check path to /.

Configure the Load Balancer:

• After creating the target group, navigate to the Load Balancers section.
• Select your ALB and go to the Listeners tab.
• Choose the listener for HTTPS (usually port 443) and click on View/edit rules.
• Modify the default rule to forward traffic to your newly created target group.

Register Targets:

• Go back to your target group, and under Targets, click on Register targets.
• Select the instances or IP addresses that correspond to your Transfer Family Server.

Verify Configuration:

• Ensure that your ALB is correctly routing traffic to the target group.
• Check the health status of your targets in the target group to verify that they are marked as healthy.

If there are any doubts feel free to comment Thank you:)

Hello Vlad,

For AWS Transfer Family over HTTPS, the health check endpoint for an ALB target group should be configured as follows:

Health Check Protocol: HTTP or HTTPS

Health Check Path: ' / '

Port: 5080

This configuration will allow the ALB to check the health status of your AWS Transfer Family Server.

Just to provide some more details. I know how to configure ALB and Target Group in general. I don't know how to configure Target Group for AWS Transfer Family Server. It is supposed to communicate over HTTP and port 5080, but I have not found information about endpoint providing health status to ALB.

Thanks, Vlad

It looks like more connectivity issue. The VPC has two public subnets and two private subnets. I'm using two different zones. So, there is public subnet and private subnet in each zone. I have AWS Transfer Family server configured with these two private subnets. The ALB is configured with public subnets. The target group associated with ALB is configured with HTTP:5080 and two targets - private IP addresses associated with Transfer Family Server. The Health check is configured with path: '/', protocol: HTTP, Port: Traffic Port (5080). Both targets are still unhealthy.

I have created new security group for Transfer Family Server to allow inbound traffic on TCP 5080. I allowed all outbound traffic. It didn't help :/

Thanks, Vlad

Quick update, I believe that I fixed the networking. Now, I'm getting error: Health checks failed with these codes: [400]. The Health Check is configured with HTTP, port 5080, path '/' and success code 200.

Any advice would be really appreciate. Thanks, Vlad