AWS Application Load Balancer (ALB) and Network Load Balancer (NLB) Access Control and SSL/TLS

[@warrenb7450]

I now finally understand how the ALB and NLB work with SSL/TLS. Thank you!

[@guiin6]

same here.

[@parthphalke4444]

You make these concepts very easy to understand. Thanks Neal!

[@archprof4943]

Very well depicted and described. Thank you Neal for taking time in producing this public content. Cheers. 🙏

[@andreelyusef3235]

Top level video sir!

[@DigitalCloudTraining]

Thank you, Andre.

[@liyangau]

Thank you for another great video. It seems to me that there is no good reason to use NLB to terminate TLS given ALB has more features. Does anyone know in what scenario people should choose NLB and terminate SSL on it?

[@DigitalCloudTraining]

This would be a great question to post on our fb group: facebook.com/groups/awscertificationqa

[@nouchie-tech8272]

i have question, what if my ALB PUBLIC-FACING, in a private subnet target group is an NLB IPs in another private subnet with same VPC, how should my SG be configured since NLB doesn't hv SG? Can I add global accelerator as and entering point to my front-end ALB in private subnet?

[@DigitalCloudTraining]

You can learn more about different architectural patterns in our courses.

[@ip8201]

Can you please share a link to aws doc that specifies that when NLB has ip-based target group it does not preserve original ip? There are some exceptions from source ip preservation, but by default as far as I remember NLB preserves source ip in both cases.

[@DigitalCloudTraining]

Hi there, we recommend posting your question in our Facebook group. Our community members are always happy to share their knowledge and help each other out. If you're not already a member of our Facebook community, we'd love to have you join us! 
 Here's the link to sign up: facebook.com/groups/awscertificationqa Once you're in, you can post your question and get some helpful insights.

[@khiz5755]

Hi Neil is this still valid that NLB can't have security groups ?

[@DigitalCloudTraining]

Hi there, we recommend posting your question in our Facebook group. Our community members are always happy to share their knowledge and help each other out. If you're not already a member of our Facebook community, we'd love to have you join us! 
 Here's the link to sign up: facebook.com/groups/awscertificationqa Once you're in, you can post your question and get some helpful insights.