amazon web services - How do you allocate STATIC addresses to an EBS (beanstalk) within a VPC? -


our current website uses elastic beanstalk create instances, need whitelist ips can talk private resource.

how do this? ebs uses vpc public subnet.

thanks!

there 2 possible options achieve want.

option 1:

if backend ec2 intances in public subnet, pre-allocate pool of elastic ip addresses , whitelist them private resource.

since ec2 instances created auto scaling group (i assume), have script runs on ec2 instance select elastic ip address pool , associate instance.

a problem occurs if pool of elastic ip addresses runs out.

option 2:

if ec2 instances in private subnet, have outbound traffic ec2 instances go through nat.

you allocate single elastic ip address , whitelist elastic ip address private resource.

if associate elastic ip address nat, private resource see traffic ec2 instances originating whitelisted ip address.

additional comments

since have public facing elb, backend ec2 instances should in private subnets security purposes.

this, along scripting required option 1, makes option 2 preferred choices.


Comments

Popular posts from this blog

java - pagination of xlsx file to XSSFworkbook using apache POI -

Unlimited choices in BASH case statement -

apache - How do I stop my index.php being run twice for every user -