can aws deliver the public ip directly on the CHR interface mikrotik routeros?

0

can aws deliver the public ip directly on the CHR interface mikrotik routeros? when I create an instance in aws and use an elastic ip such as 52.200.1.219 and enter winbox, in ip address I see this ip 172.31.17.112. that way I depend on an aws firewall that is in the middle, I would like to know if it is possible to place the public ip 52.200.1.219 directly in mikrotik routeros any help?

1 回答
0

No, it's not possible to assign an Elastic IP address to an instance directly. There is a 1:1 NAT operation that is provided by the Internet Gateway in your VPC that maps between the Elastic IP address and the private IP address.

The filtering mechanism between the internet and your instance is a Security Group - to allow traffic to your instance (in this case the virtual router); allow the appropriate protocols and ports in the security group.

profile pictureAWS
专家
已回答 1 年前
  • but why aws it not allowed to have the public ip directly in the virtual router??? It is something very strange for me, in digital ocean by default it is that way

  • That's just the way it works in AWS. Instances in a VPC have a private IP address. They can be assigned a public/elastic IP which is handled by doing 1:1 NAT at the Internet Gateway.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则