Does DCV Connection Gateway need a public IP address if behind an Application Load Balancer

0

One of our security requirements is to not have any instances have a public IP address, including the DCV Connection Gateway instance. Is this possible?

Client --> ALB --> DCV Connection Gateway instance --> DCV server Instance

已提问 1 年前293 查看次数
1 回答
1

You won’t need a public IP for the DCV Connection gateway instance if it is registered as a target to the ALB and is present in the same VPC as ALB, the ALB will be able to communicate to the instance via their private IP. ALB targets do not need to be public, they just need to be accessible by ALB.

AWS
支持工程师
已回答 1 年前
  • Hmm - we must have a configuration issue then. We have set it up as you described and it does not work until we give the DCV Gateway a public IP address. Have you tested this? We are using a ALB (application load balancer) not a NLB (network load balancer) if that makes any difference.

  • Typically you would have: [NICE DCV Client (thick or browser)] --tcp/udp with tls--> [NLB - typically public if you want to reach it from anywhere] -> [Connection Gateway - Private] -> [Target Virtual Desktop - Private]

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则