Does DCV Connection Gateway need a public IP address if behind an Application Load Balancer

0

One of our security requirements is to not have any instances have a public IP address, including the DCV Connection Gateway instance. Is this possible?

Client --> ALB --> DCV Connection Gateway instance --> DCV server Instance

feita há um ano292 visualizações
1 Resposta
1

You won’t need a public IP for the DCV Connection gateway instance if it is registered as a target to the ALB and is present in the same VPC as ALB, the ALB will be able to communicate to the instance via their private IP. ALB targets do not need to be public, they just need to be accessible by ALB.

AWS
ENGENHEIRO DE SUPORTE
respondido há um ano
  • Hmm - we must have a configuration issue then. We have set it up as you described and it does not work until we give the DCV Gateway a public IP address. Have you tested this? We are using a ALB (application load balancer) not a NLB (network load balancer) if that makes any difference.

  • Typically you would have: [NICE DCV Client (thick or browser)] --tcp/udp with tls--> [NLB - typically public if you want to reach it from anywhere] -> [Connection Gateway - Private] -> [Target Virtual Desktop - Private]

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas