AWS Network Load balancerΒΆ
It Explains about Creating Network Load balancer in AWS and Configuring it VM running with Fire Insights.
Below are steps involved in Creating Network Load balancer in AWS.
- Login with AWS Console and search for load balancer with EC2 feature.
- Create Load Balancer & select Network Load Balancer.
- Configure Load balancer
Add Name
Scheme : internet-facing
IP address type : ipv4
Listeners
Load Balancer Protocol : TLS (SECURETCP) Port: 443
Availability Zones
VPC : select VPC where application vm is running.
Availability Zones : select the specific zone.
- Configure Security Settings
Select default certificate.
AWS Certificate Manager (ACM) is the preferred tool to provision and store server certificates. If you previously stored a server certificate using IAM, you can deploy it to your load balancer.
Certificate type
Certificate name
Security policy
Note
Make sure to add certificate either through ACM or IAM
https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/configuring-https-ssl-upload.html
- Configure Routing
Target group
Name : A name of target group
Target type : Instance
Protocol : TCP
Port : 80
Register Target
- Port forwarding
As Fire Insights by default running on port 8080 for HTTP & 8443 for HTTPS, Make sure forward HTTP or HTTPS to specified port on which Fire Insights is running.
sudo firewall-cmd --add-forward-port=port=443:proto=tcp:toport=8443 --permanent
sudo firewall-cmd --reload