Skip to content

Latest commit

 

History

History
22 lines (17 loc) · 1.12 KB

dual_alb_service_discovery.md

File metadata and controls

22 lines (17 loc) · 1.12 KB
Raw

Dual ALB Public/Private Service Discovery

Use Case

  • Run one or more microservice based applications on an ECS cluster
  • Expose the entrypoint proxy/router microservices publicly
  • Keep the other microservices private
  • Minimal AWS infrastructure

Security Groups

Name Rule Type Port/Protocol Source
External_ALB Ingress HTTPS 0.0.0.0/0
Internal_ALB Ingress HTTP ECS
ECS Ingress ANY External_ALB, Internal_ALB

Diagram

dual alb diagram

Made with draw.io, XML definition here.

Terraform

Currently this version (danieladams456/aws-labs) uses an "internal service discovery" security group that is shared between ECS and the internal ALB. The design here allows for single dedicated security groups for each resource. I will update it when I get a chance.