can aws deliver the public ip directly on the CHR interface mikrotik routeros?

0

can aws deliver the public ip directly on the CHR interface mikrotik routeros? when I create an instance in aws and use an elastic ip such as 52.200.1.219 and enter winbox, in ip address I see this ip 172.31.17.112. that way I depend on an aws firewall that is in the middle, I would like to know if it is possible to place the public ip 52.200.1.219 directly in mikrotik routeros any help?

1 個回答
0

No, it's not possible to assign an Elastic IP address to an instance directly. There is a 1:1 NAT operation that is provided by the Internet Gateway in your VPC that maps between the Elastic IP address and the private IP address.

The filtering mechanism between the internet and your instance is a Security Group - to allow traffic to your instance (in this case the virtual router); allow the appropriate protocols and ports in the security group.

profile pictureAWS
專家
已回答 1 年前
  • but why aws it not allowed to have the public ip directly in the virtual router??? It is something very strange for me, in digital ocean by default it is that way

  • That's just the way it works in AWS. Instances in a VPC have a private IP address. They can be assigned a public/elastic IP which is handled by doing 1:1 NAT at the Internet Gateway.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南