AWS Network Load Balancer

Re:AWS Network Load Balancer by nonane on Thursday September 07, 2017 @09:50PM (#15197331)

I don't think they can add TLS termination because of the way it's implemented. NLB runs on Layer 4 - the transport layer where TCP/UDP run on. TLS technically runs on top of the transport layer.

[ Parent | on HN ]

Re:AWS Network Load Balancer by mdouglass on Thursday September 07, 2017 @11:34PM (#15197720)

That’s kind of the answer I was expecting, just hoping it wasn’t the case. From the marketing material they really want you to move, but not having a solution to offload tls makes it impossible for us. And it worries me to see the CLB getting effectively deprecated with it an alternative

[ Parent | on HN ]

Re:AWS Network Load Balancer by seanp2k2 on Friday September 08, 2017 @01:16AM (#15198030)

ALB can term TLS for h2 and wss: https://aws.amazon.com/elasticloadbalancing/ sounds like that's what you might want?

[ Parent | on HN ]

Re:AWS Network Load Balancer by mdouglass on Friday September 08, 2017 @01:05PM (#15201966)

Unfortunately we are currently on a custom TCP-based protocol (we're in the game space). But yes, this is more incentive for us to consider h2 or wss.

[ Parent | on HN ]

Re:AWS Network Load Balancer by EwanToo on Friday September 08, 2017 @08:05AM (#15199568)

I'm hopeful AWS will follow this up with ACM supporting SSL certs on instances, so you can run a LetsEncrypt equivalent on each instance, providing TLS end to end encryption

[ Parent | on HN ]

Re:AWS Network Load Balancer by paulddraper on Thursday September 07, 2017 @10:33PM (#15197490)

Huh? It's no different than ELB.

[ Parent | on HN ]