Connectivity issues from Public NLB to Fargate container UDP port

I have a public NLB with some TCP and UDP listeners and a fargate container which listens on UDP port 8001 which is hosted in same VPC as NLB. A target group is attached to NLB listener UDP:8001 using UDP protocol and healthcheck is provided through a TCP port 1024 on fargate container. Security groups for Target group, NLB and Container allow UDP 8001 inbound and outbound traffic. But container is not receiving any packets on UDP port. This container also has TCP listeners which are working are working fine.

I only want to achieve the UDP port connection from public to ECS container through NLB.

Any help is much appreciated. Thanks

主题

无服务器容器

标签

AWS Fargate 网络负载均衡器

语言

English

Raj Hans

已提问 2 个月前175 查看次数

1 回答

最新
投票最多
评论最多

这些答案有用吗？为正确答案投票，以帮助社区从您的知识中受益。

Do you have a security group on the NLB? If so also ensure inbound 8001 UDP is allowed.

专家

Gary Mclean

已回答 2 个月前

专家

Giovanni Lauria

已审核 2 个月前

Raj Hans
2 个月前
Yes, I have a security group attached to NLB which allows inbound and outbound traffic to 8001 port.
Gary Mclean 专家
2 个月前
Can you share the task definition?

Raj Hans

1 个月前

Here is my task definition:

{
    "taskDefinitionArn": "arn:aws:ecs:ap-southeast-2:xxxx:task-definition/rollover:21",
    "containerDefinitions": [
        {
            "name": "rollover",
            "image": "xxxx.dkr.ecr.ap-southeast-2.amazonaws.com/rollover:latest",
            "cpu": 0,
            "portMappings": [
                {
                    "containerPort": 8001,
                    "hostPort": 8001,
                    "protocol": "udp"
                }
            ],
            "essential": true,
            "environment": [],
            "mountPoints": [],
            "volumesFrom": [],
            "secrets": [
                
            ],
            "logConfiguration": {
                "logDriver": "awslogs",
                "options": {
                    "awslogs-create-group": "true",
                    "awslogs-group": "rollover",
                    "awslogs-region": "ap-southeast-2",
                    "awslogs-stream-prefix": "ecs"
                }
            },
            "healthCheck": {
                "command": [
                    "CMD-SHELL",
                    "nc -uzv localhost 8001 || exit 1"
                ],
                "interval": 60,
                "timeout": 50,
                "retries": 3,
                "startPeriod": 60
            },
            "systemControls": []
        },
        {
            "name": "healthcheck",
            "image": "busybox:latest",
            "cpu": 0,
            "portMap

Connectivity issues from Public NLB to Fargate container UDP port

相关内容