Questions tagged with Elastic Load Balancing
Content language: English
Sort by most recent
Cloudwatch SDK using putLogEvents() works locally but 504 Gateway timeout on my server (EC2)
I have a function that uses `putLogEvents()` method and it works fine locally but not when we push it out to our server (EC2 instance). We are always getting 504. I checked our LB and its allowing all traffic. I am running out of ideas why it is timing out on our server.
Handling double slash // in URL path by Load Balancer
We have a website running on Beanstalk and served behind an application load balancer. When there is double slash in the URL e.g. https://example.com/en//page/path/ the load balancer forwards the request to https://example.com/en/page/path/ even though the URL in the browser remains as https://example.com/en//page/path/. How can we handle this so that the load balancer either forwards the request with the double slash to beanstalk or does a 301 redirect to sigle slash url.
Application Load Balancer payload limit?
Hello, I was curious what the maximum payload ammount is for an application load balancer? For example, what is the size limit that an ALB will allow a json request body to be for an HTTP post call. Is 100MB the limit? i've checked https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-limits.html for quotas but I'm not seeing payload listed.
Network Load Balancer SSH with Proxy V2 and Client IP Preserving
In extend to following question, [https://repost.aws/questions/QUL1n0UH_ITzCNSZ5d_NR1Qg/proxy-protocol-v-2-with-disabling-client-ip-preservation-in-nlb-target-groups]() I have configured a network load balancer disabling client IP preservation and enabling proxy V2. Idea is to only allow requests from Load balancer to EC2 instance behind. All the configurations are in a private network and security groups have attached to EC2 instance to allow traffic only from load balancer for SSH and HTTP. I could find a way to get the client ip address in http using the configurations in nginx.*** Is there a way to get the original client ip address in SSH request and log it to a file?***
Proxy Protocol V2 with Disabling client IP preservation in NLB Target groups
Proxy Protocol V2 with Disabling client IP preservation in NLB Target groups Here, I am doing some R&D type of activity. I have a network load balancer and an EC2 instance running in my private network. In EC2 instance, nginx is installed and configured to accept proxy v2. I have configured the log format as follows in order to log the original client ip of the request. ``log_format compression '$remote_addr - $remote_user [$time_local] ' '"$request" $status $body_bytes_sent ' '"$http_referer" "$http_user_agent" "$gzip_ratio"';`` I have enabled proxy V2 in network load balancer and disabled client ip preservation. Security group attached to EC2 instance allow traffic only from network load balancer IP. What I want to do is allow traffic only from Network Load Balancer and I want to retrieve the Original client ip from the proxy headers. Allow traffic from NLB is working properly but with the above setup nginx still logs the NLB's IP as the client IP. What is the issue of this setup?
Private Instance and Public ELB HTTPS Problem.
My VPC structure looks like this: VPC: 1 Public Subnet : 2 (1 Public Instance in each Subnet) Public ELB : 1 (Public ELB for Public Instance above) Public Subnet : 1 (for NAT Gateway) Private Subnet : 1 (1 Private Instance) Here, the Private Instance should connect to the Public ELB. At this time, HTTPS communication should be established between the Private Instance and the Public Instance behind the ELB, but HTTPS communication is not possible because the Public ELB is playing an intermediate role. How can I solve the problem? Or is the structure wrong?
https listener creation fails in AWS Elastic Beanstalk
I have developed and deployed a python application to AWS Elastic Beanstalk that works fine. When I modify the application bundle with the addition of the ```.ebextensions/https-reencrypt-alb.config``` file the deployment of the Application fails with the following Error: ``` "Unable to deploy application version: Configuration validation exception: You must specify an SSL certificate to configure a listener to use HTTPS." ``` Contents of ```https-reencrypt-alb.config``` as follows... ``` aws:elbv2:listener:443: DefaultProcess: https ListenerEnabled: 'true' Protocol: HTTPS aws:elasticbeanstalk:environment:process:https: Port: '443' Protocol: HTTPS ``` I have a certificate created all ready, but creating a listener on port 443 fails (silently, after reporting - Pending create). I assume this is failing because I have not been able to deploy the version with this https termination file included. I have successfully deployed two previous, and very similar, applications with https support (in June and August) and they work fine. Has something changed in Elastic Beanstalk/Route 53/Certificate Manager since then that requires a different deployment process?
CloudFormation deleting nlb did not release public IP
I deleted my C/f stack which included an NLB but that hasn't released the public IPs associated with each subnet. To be clear, the NLB instances have been deleted but their public IPs are still marked as in use. I'm now unable to detach , or delete them - as they are marked as being in use by another service - the NLB that has successfully been deleted. None of the troubleshooting articles (which are primarily related to EIPs) offer any material resolution. Even logging into the console as root, I get the error that I do not have permissions. Any thoughts on what I'm missing?
Hello guys , help me to setup load balancer
Hello guys , i am from India and. I am beginner in Amazon ec2, but i have currently running ec2 with cloud panel and wordpress and i want to use load balancer on it but i am unable to use that , if anyone can help me, simply reply here. *Edit: Removed phone number - Rafeeq C.
Is it possible to setup a NLB forwarding to ALB having NLB endpoint secured?
Hi I have an NLB( internet-facing, public subnet) forwarding traffic to ALB(internal; private subnet) with ECS backend services. That works great , but essentially what I want is to have https://api.example.com, but haven't found a way to make that work. Is this even possible? What I am trying to do is pretty much is outlined in this question https://repost.aws/questions/QUoy9PIqmzTOOFo27QHdAoGA/traffic-doesnt-flow-whe-using-alb-as-a-target-of-nlb.
Getting 502 Bad Gateway for vitalticks.in web sitae
Hi, We are facing an issue with the website vitalticks.in 1. 502 bad gateway error message. 2. when we checked in target groups the health status is mentioned as unhealthy (Health status details:- Health checks failed). Kindly help how to resolve the issue. Thnak you.
ACM Renew issue with Correct DNS
I have problem to verify (renew) ACM Certificate for domain. Verification is by DNS and DNS are correctly set. Renewal eligibility is "Eligible". Certificate is associated with Load Balancer. This is the 3th renew. Renewal status is still "Pending validation" 15 days before expiration. Can anyone help?