Is API Gateway in Front of EKS a Common Architecture Pattern?
Is using Amazon API Gateway to route requests to workloads running on Amazon EKS a common architecture? I often see examples of API Gateway integrated with Lambda, ECS,…
ALB
Surprised by High AWS Costs: What Alternatives Have You Tried?
I've been running a small ECS/Fargate setup, but my recent AWS bill shot up to around $1,000. To my surprise, the compute costs weren't the main issue. The…
Why was my AWS bill so high when compute costs were low?
I recently received a $1,000 bill from AWS while running a small ECS/Fargate setup, and it caught me off guard. I expected compute costs to be the main…
Issues with JWT and OIDC Authentication on the Same Application Load Balancer
I've set up JWT authentication on my Application Load Balancer (ALB) and I'm running into issues. Even after configuring it on a different host header and a sub-path,…
What are the best alternatives to NGINX Ingress Controller for managing URL rewrites in Artifactory?
I'm currently hosting Artifactory on EKS using the NGINX Ingress Controller for URL rewrites. Since the NGINX Ingress Controller will soon be retired, I'm looking for reliable alternatives.…
What Could Be Causing 502 Errors in My API Setup Without ECS Logs?
I'm experiencing intermittent 502 errors with my API setup that includes an API Gateway (HTTP v2) directing traffic to an Application Load Balancer (ALB), which then routes it…
How Are Ingress Rules Managed in Kubernetes Load Balancers?
I experimented with Kubernetes in a proof of concept a while back, where I worked with both the AWS Load Balancer Controller and an NGINX ingress along with…
How to Organize S3 Logs from ALB and CloudFront?
I'm working on centralizing logs from our Application Load Balancer (ALB) and CloudFront into S3 buckets for our SIEM system to access. I'm assuming we should have a…
How to Securely Connect API Gateway to an Internal ALB?
I'm trying to set up a public API Gateway that communicates through a VPC Link to an internal ALB/NLB combination since direct connections to the ALB aren't possible.…
Best Security Practices for EKS Deployed Apps
Hey everyone! I've recently shifted our monolithic .NET applications to a microservices architecture and deployed them on EKS. We're using an Application Load Balancer (ALB) set up for…
Do I Need to Keep the CNAME Record for Certificate Validation?
I recently set up a certificate for my Application Load Balancer (ALB) and validated it using Route53. I'm wondering if there's any real reason to keep the CNAME…
Why is my ALB losing the OIDC client secret?
I'm having a strange issue with my Application Load Balancer (ALB) that authenticates with Okta using OpenID Connect (OIDC). It seems to lose the client secret configured in…
Can an Application Load Balancer Use a Fixed IP Address?
Hey everyone! I'm struggling with a quiz question for which I've already submitted an answer but got it wrong. We are allowed to research and try again. The…
Can an Application Load Balancer Have a Static IP Per Availability Zone?
Hey everyone! I'm in a bit of a bind with this quiz question, and I'm hoping someone can shed some light on it. The question is: "Can an…
Why is my CloudFront getting a 502 OriginConnectError with ALB?
I'm running into a 502 OriginConnectError on CloudFront for my website, and I'm pretty stumped. My setup involves CloudFront serving my custom domain with a default behavior that…
How Can I Redirect Multiple Domain Extensions to a .com Using ALB?
I'm trying to set up a setup where multiple domain extensions like example.net, example.org, and example.de redirect to my main .com site using my load balancer. I already…
How to Temporarily Stop Traffic to a WebSocket Instance?
I'm managing a service with long-lived WebSocket connections, and I'm facing a challenge. Once I reach my configured capacity, I'd like to stop my Application Load Balancer (ALB)…
Handling HTTP 502 Errors with AWS ALB and Istio Ingress Gateway
I've taken over an EKS cluster that uses an ELB created by Istio for its LoadBalancer resource. Now, my company's security team wants me to set up WAF…
How to Set Up My Web Server Behind an ALB with SSL?
I'm running a Linux server that hosts a web page and I've successfully added an Elastic IP, so I can access it directly. Now, I want to move…
How to Set Up Path-Based Routing for Multiple AWS Accounts?
Hey everyone! I'm relatively new to AWS and need some help. We're managing several AWS accounts, each with its own subdomains for services (like serviceA.account1.example.com). We're considering moving…