amazon-elb

AWS Application Load Balancer (ALB) path based routing not functioning as expected

落爺英雄遲暮 提交于 2019-12-03 10:48:50
I am working on a POC to prove out AWS path based routing through an Application Load Balancer to a set of very basic "hello world" node.js applications using express. Without the path based routing in place and having multiple listeners, 1 listener for each application, each respective listener and application is working as expected. Therefore, the targets within the Target Groups have both passed health checks and are shown as healthy. However, when I switch to the path based routing implementation on 1 of the listeners (deleting the other unnecessary listener) I get the following error for

WebSockets: wss from client to Amazon AWS EC2 instance through ELB

回眸只為那壹抹淺笑 提交于 2019-12-03 08:08:39
问题 How can I connect over ssl to a websocket served by GlassFish on an Amazon AWS EC2 instance through an ELB? I am using Tyrus 1.8.1 in GlassFish 4.1 b13 pre-release as my websocket implementation. Port 8080 is unsecured, and port 8181 is secured with ssl. ELB dns name: elb.xyz.com EC2 dns name: ec2.xyz.com websocket path: /web/socket I have successfully used both ws & wss to connect directly to my EC2 instance (bypassing my ELB). i.e. both of the following urls work: ws://ec2.xyz.com:8080/web

nginx $scheme variable behind load balancer

[亡魂溺海] 提交于 2019-12-03 06:55:41
问题 Is it possible to force nginx $scheme value to "https" if nxinx is running behind load balancer? In my scenario Load balancer takes care of https communication with client and forwards requests to nginx as raw http. I know I can do something like this to detect https set $my_scheme "http"; if ($http_x_forwarded_proto = "https") { set $my_scheme "https"; } but I'm just curious if there is something like real_ip_header function for IPs. Are there also some headers I need to update when

What does the Amazon ELB automatic health check do and what does it expect?

被刻印的时光 ゝ 提交于 2019-12-03 05:46:50
问题 Here is the thing: We've implemented a C++ RESTful API Server, with built-in HTTP parser and no standard HTTP server like apache or anything of the kind It has been in use for several months in Amazon structure, using both plain and SSL communications, and no problems have been identified, related to Amazon infra-structure We are deploying our first backend using Amazon ELB Amazon ELB has a customizable health check system but also as an automatic one, as stated here We've found no

AWS ECS 503 Service Temporarily Unavailable while deploying

久未见 提交于 2019-12-03 05:43:51
I am using Amazon Web Services EC2 Container Service with an Application Load Balancer for my app. When I deploy a new version, I get 503 Service Temporarily Unavailable for about 2 minutes. It is a bit more than the startup time of my application. This means that I cannot do a zero-downtime deployment now. Is there a setting to not use the new tasks while they are starting up? Or what am I missing here? UPDATE: The health check numbers for the target group of the ALB are the following: Healthy threshold: 5 Unhealthy threshold: 2 Timeout: 5 seconds Interval: 30 seconds Success codes: 200 OK

Symfony2 behind ELB is redirecting to http instead of https

↘锁芯ラ 提交于 2019-12-03 05:39:22
问题 Issue: User logs in with https://example.com/login Authentication is approved As configured in security.yml Symfony2 redirects user to profile page after login. But it redirects them to the wrong url http://example.com/homepage security.yml : security: encoders: FOS\UserBundle\Model\UserInterface: sha512 role_hierarchy: ROLE_ADMIN: ROLE_USER ROLE_SUPER_ADMIN: [ROLE_USER, ROLE_ADMIN, ROLE_ALLOWED_TO_SWITCH] providers: fos_userbundle: id: fos_user.user_provider.username_email firewalls: main:

Load blancing MQTT broker

拥有回忆 提交于 2019-12-03 03:40:46
Is it possible to load balance MQTT broker? Can I use ELB to load balance MQTT? Any pointers in this direction would be helpful. I hit upon http://www.slideshare.net/kellogh/mqtt-kafka-33100776 but it did not help much. Use HAProxy . A free, fast and reliable solution offering high availability, load balancing and proxying for TCP and HTTP based applications. It’s suited for very high traffic web sites. Load balancing MQTT brokers is not supported out-of-the-box by most MQTT brokers. There are brokers available which support clustering, though. Take a look at this list to find out a broker

Websockets with AWS and Elastic Beanstalk

非 Y 不嫁゛ 提交于 2019-12-02 22:26:45
I'm trying to get my websockets working with Amazon Web Service and Elastic Beanstalk (ELB). I set up a proxy protocol according to: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/enable-proxy-protocol.html I've opened up all inbound traffic to my load balancer and other security groups on all ports, for all IPs. I also kept the load balancer listerner as HTTP on port 80. My websocket connection gives the following error when trying to connect on port 80: failed: Error during WebSocket handshake: Unexpected response code: 400 And this error on port 8080: failed: Error in

Why does Elastic Load Balancing report 'Out of Service'?

假如想象 提交于 2019-12-02 21:42:22
I am trying to set up Elastic Load Balancing (ELB) in AWS to split the requests between multiple instances. I have created several images of my webserver based on the same AMI, and I am able to ssh into each individually and access the site via each distinct public DNS. I have added each of my instances to the load balancer, but they all come back with the Status: Out of Service because they failed the health check. I'm mostly confused because I can access each instance from its public DNS, but I get a timeout whenever I visit the load balancer DNS name. I've been trying to read through all

nginx $scheme variable behind load balancer

喜你入骨 提交于 2019-12-02 21:29:26
Is it possible to force nginx $scheme value to "https" if nxinx is running behind load balancer? In my scenario Load balancer takes care of https communication with client and forwards requests to nginx as raw http. I know I can do something like this to detect https set $my_scheme "http"; if ($http_x_forwarded_proto = "https") { set $my_scheme "https"; } but I'm just curious if there is something like real_ip_header function for IPs. Are there also some headers I need to update when detecting https manualy? Our setup is the same as yours, only using map instead of if/set (as recommended by