Does DCV Connection Gateway need a public IP address if behind an Application Load Balancer

0

One of our security requirements is to not have any instances have a public IP address, including the DCV Connection Gateway instance. Is this possible?

Client --> ALB --> DCV Connection Gateway instance --> DCV server Instance

preguntada hace un año292 visualizaciones
1 Respuesta
1

You won’t need a public IP for the DCV Connection gateway instance if it is registered as a target to the ALB and is present in the same VPC as ALB, the ALB will be able to communicate to the instance via their private IP. ALB targets do not need to be public, they just need to be accessible by ALB.

AWS
INGENIERO DE SOPORTE
respondido hace un año
  • Hmm - we must have a configuration issue then. We have set it up as you described and it does not work until we give the DCV Gateway a public IP address. Have you tested this? We are using a ALB (application load balancer) not a NLB (network load balancer) if that makes any difference.

  • Typically you would have: [NICE DCV Client (thick or browser)] --tcp/udp with tls--> [NLB - typically public if you want to reach it from anywhere] -> [Connection Gateway - Private] -> [Target Virtual Desktop - Private]

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas