Does DCV Connection Gateway need a public IP address if behind an Application Load Balancer

0

One of our security requirements is to not have any instances have a public IP address, including the DCV Connection Gateway instance. Is this possible?

Client --> ALB --> DCV Connection Gateway instance --> DCV server Instance

demandé il y a un an292 vues
1 réponse
1

You won’t need a public IP for the DCV Connection gateway instance if it is registered as a target to the ALB and is present in the same VPC as ALB, the ALB will be able to communicate to the instance via their private IP. ALB targets do not need to be public, they just need to be accessible by ALB.

AWS
INGÉNIEUR EN ASSISTANCE TECHNIQUE
répondu il y a un an
  • Hmm - we must have a configuration issue then. We have set it up as you described and it does not work until we give the DCV Gateway a public IP address. Have you tested this? We are using a ALB (application load balancer) not a NLB (network load balancer) if that makes any difference.

  • Typically you would have: [NICE DCV Client (thick or browser)] --tcp/udp with tls--> [NLB - typically public if you want to reach it from anywhere] -> [Connection Gateway - Private] -> [Target Virtual Desktop - Private]

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions