amazon-web-servicesamazon-vpcinternal-load-balanceraws-albaws-vpn

How to allow traffic from VPN to access Internal Load Balancer (AWS)?


Is it possible to allow traffic from a Customer Gateway to access an Internal Application Load Balancer directly? I can access the Internal ALB via ec2 instances inside the VPC, however I would like to access it from my network.

I have set up a VPG, and attached this to the VPC via the Routes, according to these instructions https://medium.com/@nZenitram/connecting-an-aws-vpc-to-your-vpn-from-the-cloud-to-the-colo-ed1f2985ccf1. But I still can not access the Internal ALB directly.

Is there a way to make this happen? If so, how?


Solution

  • As @KyleM mentioned, yes it is absolutely possible. Another thing to watch out for is that your local machine gets a VPC IP assigned when you log on and you need to open up the LBs security group to the CIDR that the VPN uses. Also, can you access other private resources inside the VPC through the VPN, such as an EC2 instance in a private subnet?