topic Re: ALB support in load balancer role for case of auto scaling vSEC in AWS in Cloud Firewall

ALB support in load balancer role for case of auto scaling vSEC in AWS

Alex_Kharkevich — Fri, 05 Jan 2018 08:39:35 GMT

I'm trying to figure out how to build a vSEC auto scale cluster.
My investigation based on:
- Solution sk112575 vSEC for AWS
- Presentation from TechTalk "Cloud Security Best Practices"

I have a stupid question - what kind types of load balancers can be used for vSEC sandwich, as on 22 slide from presentation or on Network Diagram from solution.

Is ALB supported as an external and internal load balancer?

Thanks,

Alex.

Re: ALB support in load balancer role for case of auto scaling vSEC in AWS

PhoneBoy — Fri, 05 Jan 2018 08:49:41 GMT

The actual Load Balancer is transparent to us, suggesting you can use either.

In most of our demos, we use an ELB.

Re: ALB support in load balancer role for case of auto scaling vSEC in AWS

Vladimir — Fri, 05 Jan 2018 11:42:09 GMT

I've used classic ELB. The others all have limitations that prevents their configuration according to sks. Namely, treatment of protocol as generic TCP instead of HTTP/S.

Re: ALB support in load balancer role for case of auto scaling vSEC in AWS

Alex_Kharkevich — Fri, 05 Jan 2018 11:49:57 GMT

But, Classic ELB have no support for HTTP/2 unlike of ALB.

You have performance statistic for Classic ELB case? I mean drill down timing from end user browser request to getting data from application