Networking & Content Delivery
Tag: Application Load Balancer
Application Load Balancer-type Target Group for Network Load Balancer
Application Load Balancer (ALB) is a fully managed layer 7 load balancing service that load balances incoming traffic across multiple targets, such as Amazon EC2 instances. ALB supports advanced request routing features based on parameters like HTTP headers and methods, query string, host and path based routing. ALB also offloads important capabilities including TLS termination, […]
How to solve Private IP exhaustion with Private NAT Solution
Introduction: As our computing needs evolve, one of the most common questions we hear from customers is, “how do I manage my private IP space? I’m almost out of it.” It’s difficult to assign separate Private IP ranges (RFC 1918) to different business units in an organization because the available IPv4 address range is restricted. […]
Using AWS Lambda to enable static IP addresses for Application Load Balancers
Update: On September 27th, 2021, we launched Application Load Balancer(ALB)-type target groups for Network Load Balancer (NLB). With this launch, you can register ALB as a target of NLB to forward traffic from NLB to ALB without needing to actively manage ALB IP address changes through Lambda. You can also use AWS Global Accelerator to […]
Accessing an AWS API Gateway via static IP addresses provided by AWS Global Accelerator
Introduction In this article, I will walk you through the steps to configure Amazon API Gateway in combination with AWS Global Accelerator to present Internet-facing API via static IP addresses to end users. This design addresses the need for static IP safelisting and also provides additional performance benefits to end users by sending user’s traffic […]
Solving DNS zone apex challenges with third-party DNS providers using AWS
Many customers ask us how they can point their zone apex to their web content if it uses a DNS name rather than an IP address. This blog covers three design patterns and approaches that solve zone apex challenges with third-party DNS providers for applications hosted in AWS—and the pros and cons of each approach.
Securing ingress using security solutions and AWS Transit Gateway
Introduction Internet-facing applications, by their nature, have a larger attack surface and are exposed to categories of threats most other types of applications will never have to face. Having the necessary protection from attacks on these types of applications, and minimizing the impact of attacks, are a core part of any security strategy. Traditional AWS […]
Configuring an Application Load Balancer on AWS Outposts
Introduction AWS Outposts bring AWS infrastructure and services to virtually any datacenter, co-location space, or on-premises facility, in the form of a physical rack connected to the AWS global network. AWS services run locally on the Outpost, and you can access the full range of AWS services available in your Region—including Application Load Balancer (ALB). […]
Accessing private Application Load Balancers and EC2 instances through AWS Global Accelerator
Many Content Distribution Networks (CDNs) offer a feature to obfuscate the source origin through functionality commonly referred to as origin cloaking. Using AWS Global Accelerator with Client IP Address Preservation capability, similar functionally can be facilitated. Private Application Load Balancers (ALBs) and private EC2 instances can be accessed through Global Accelerator in a secure and simplified manner. AWS […]
Lambda functions as targets for Application Load Balancers
As of today, Application Load Balancers (ALBs) now support AWS Lambda functions as targets. Build websites and web applications as serverless code, using AWS Lambda to manage and run your functions, and then configure an ALB to provide a simple HTTP/S frontend for requests coming from web browsers and clients. Triggering a Lambda Function from […]
How to securely publish Internet applications at scale using Application Load Balancer and AWS PrivateLink
If you have applications spread across multiple Virtual Private Clouds (VPCs) and want to expose those applications to the Internet, you can choose from different approaches. One option is to give each VPC its own dedicated connectivity to the Internet through an attached Internet gateway. Another approach is to centralize access from the Internet through […]







