amazon web services - Loadbalancer cannot get a good health check -


i'm confused how aws load balancers work. have pretty simple setup...

i have rest based api needs exposed internet (port 80) via load balancer. want load balancer exposed internet traffic. have security group setup instance restricts direct access ipaddress testing purposes.

the load balancer not ip restricted on http, has port 80 open (with listener api service on port 3001). problem load balancer cannot see instance if setup ip restrictions on instances in question. once remove restrictions on instances, health checks start working , can access service through load balancer. problem instances have ports open internet don't want.

is there additional need allow load balancer access instances when using ip restrictions?

one final note, health checks work fine until add instance-level ip restrictions know health check not problem. think if added load balancer's ip whitelist, work, ip dynamic , not viable purpose.

don't use ip restrictions.

1) select lb, select security tab , note security group id (something sg-5555abb). click on id edit it

2) when edit load balancer security group, add 1 allow rule: http tcp 80 0.0.0.0/0 (and/or 443 if need it, idea).

3) next go instance's security group. allow load balancer's security group access instance on port 3001:custom tcp rule tcp 3001 sg-5555abb (my-load-balancer). notice in source field not enter ip address/mask security group id step 1)

http://docs.aws.amazon.com/awsec2/latest/userguide/using-network-security.html#security-group-rules


Comments

Popular posts from this blog

jOOQ update returning clause with Oracle -

java - Warning equals/hashCode on @Data annotation lombok with inheritance -

java - BasicPathUsageException: Cannot join to attribute of basic type -