Does DCV Connection Gateway need a public IP address if behind an Application Load Balancer

0

One of our security requirements is to not have any instances have a public IP address, including the DCV Connection Gateway instance. Is this possible?

Client --> ALB --> DCV Connection Gateway instance --> DCV server Instance

posta un anno fa293 visualizzazioni
1 Risposta
1

You won’t need a public IP for the DCV Connection gateway instance if it is registered as a target to the ALB and is present in the same VPC as ALB, the ALB will be able to communicate to the instance via their private IP. ALB targets do not need to be public, they just need to be accessible by ALB.

AWS
TECNICO DI SUPPORTO
con risposta un anno fa
  • Hmm - we must have a configuration issue then. We have set it up as you described and it does not work until we give the DCV Gateway a public IP address. Have you tested this? We are using a ALB (application load balancer) not a NLB (network load balancer) if that makes any difference.

  • Typically you would have: [NICE DCV Client (thick or browser)] --tcp/udp with tls--> [NLB - typically public if you want to reach it from anywhere] -> [Connection Gateway - Private] -> [Target Virtual Desktop - Private]

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande