I have a public facing load balancer in two public subnets infront of my EC2 instances to route the trafic to the VPC. The EC2 instances are in the private subnet, with inte