AWS Application Load Balancer (ALB) and Network Load Balancer (NLB) Access Control and SSL/TLS

Learn how to control access to your AWS Application Load Balancer or Network Load Balancer using Network ACLs and Security Groups. This deep dive video from my new AWS Certified Solutions Architect Professional course covers access control in AWS Elastic Load Balancing when using various deployment models.
You'll also learn how to identify source IP addresses of clients and multiple options for deploying SSL/TLS certificates to enable encryption in-transit.
To access the full course, visit: digitalcloud.training/aws-sol...
Apply coupon code "youtube" for a 10% discount.
If you find this helpful, please SUBSCRIBE to our channel!
At Digital Cloud Training, it's our mission to help you achieve success in your cloud career. To learn more about our popular on-demand courses for Amazon Web Services, visit digitalcloud.training/aws-tra...
If you have any questions feel free to leave a comment!

[@warrenb7450]

I now finally understand how the ALB and NLB work with SSL/TLS. Thank you!

[@guiin6]

same here.

[@parthphalke4444]

You make these concepts very easy to understand. Thanks Neal!

[@archprof4943]

Very well depicted and described. Thank you Neal for taking time in producing this public content. Cheers. 🙏

[@andreelyusef3235]

Top level video sir!

[@DigitalCloudTraining]

Thank you, Andre.

[@liyangau]

Thank you for another great video. It seems to me that there is no good reason to use NLB to terminate TLS given ALB has more features. Does anyone know in what scenario people should choose NLB and terminate SSL on it?

[@DigitalCloudTraining]

This would be a great question to post on our fb group: facebook.com/groups/awscertificationqa

[@nouchie-tech8272]

i have question, what if my ALB PUBLIC-FACING, in a private subnet target group is an NLB IPs in another private subnet with same VPC, how should my SG be configured since NLB doesn't hv SG? Can I add global accelerator as and entering point to my front-end ALB in private subnet?

[@DigitalCloudTraining]

You can learn more about different architectural patterns in our courses.

[@ip8201]

Can you please share a link to aws doc that specifies that when NLB has ip-based target group it does not preserve original ip? There are some exceptions from source ip preservation, but by default as far as I remember NLB preserves source ip in both cases.

[@DigitalCloudTraining]

Hi there, we recommend posting your question in our Facebook group. Our community members are always happy to share their knowledge and help each other out. If you're not already a member of our Facebook community, we'd love to have you join us! 
 Here's the link to sign up: facebook.com/groups/awscertificationqa Once you're in, you can post your question and get some helpful insights.

[@khiz5755]

Hi Neil is this still valid that NLB can't have security groups ?

[@DigitalCloudTraining]

Hi there, we recommend posting your question in our Facebook group. Our community members are always happy to share their knowledge and help each other out. If you're not already a member of our Facebook community, we'd love to have you join us! 
 Here's the link to sign up: facebook.com/groups/awscertificationqa Once you're in, you can post your question and get some helpful insights.