Comments on: Amazon Elastic Load Balancer Setup

By: Steve

Steve — Thu, 21 Jan 2010 22:45:00 +0000

Son Nguyen,

I don’t have any details but I do know that Amazon is aware of the shortcomings of the CNAME solution and has a plan in place to resolve the issue. I have no details on how or when they are going to do that though.

By: Son Nguyen

Son Nguyen — Thu, 21 Jan 2010 21:27:00 +0000

Does anyone have an idea when Amazon will offer mapping an elastic IP to the load balancer? CNAME is not a good solution for many (those that want a hybrid solution, mixing EC2 with other clusters for HA, or those that want mapping to the main domain)

By: Steve

Steve — Tue, 19 Jan 2010 07:27:18 +0000

Robin,

Thanks for commenting. I don’t have a solution for you unfortunately. I have a few contacts at Amazon and I’ll see if I can get you an answer. At the very least hopefully they can pass the shortcoming along and it can be resolved in a future version of ELB.

By: Robin

Robin — Sun, 17 Jan 2010 23:20:31 +0000

Hi Steve,

My Colleague and I both have the same issue as Bryan. We really need to be able to lock down access to the load balancer by security group.

Not being able to do this prevents us from providing restricted scalable services!!!

Any ideas on how to get around this?

Thanks!

By: Steve

Steve — Tue, 12 Jan 2010 18:47:33 +0000

What happens if you shutdown the instance getting all the traffic? Does the traffic divert to the other instance?

My initial thought is that if it is configured correctly (which it sounds like it is, especially if the test above passes) your tests are probably just not pushing enough traffic to see it use both nodes. If your just simply hitting it with your web browser you probably are not getting enough concurrent sessions for the traffic to diverge.

By: Arnaud

Arnaud — Tue, 12 Jan 2010 12:45:10 +0000

Great post on how to setup/etc!

You mentioned in the article that balancing is done at a zone level first, then within the zone. I created a ELB with 1 server in each zone, but when testing it appears that only the first server always gets all the requests.

Healthcheck reports both instances available, and I see access to the “ping” page regularily as defined.

Is this expected behavior, or is it possible to round robin between zones ?

Thanks…

By: Steve

Steve — Thu, 17 Dec 2009 23:48:34 +0000

Bryan,

I doubt that was on purpose, but more the law of unintended consequences.

Either way you may find it better to control access to your website via rules in your web server. Right now I can’t think of an elegant solution to use EC2 security rules to do what you want.

By: Bryan

Bryan — Thu, 17 Dec 2009 23:15:14 +0000

Hi,
I have a question regarding security groups and the elb. I would like to limit access to my site (which is behind an amazon elastic load balancer) by ip address, but the security groups don’t seem to let the client ip address through. when I go to the site, they only see the load balancer accessing the website instead, and filter according to that ip. So now, I’ve got a rule to accept the load balancers ip for http and https. This doesn’t allow for ip address filtering by client, which is critical for my app. Is this an intentional feature? is there a way to apply security groups to elb’s as a whole? or would I be better just doing this another way?

By: Josh G

Josh G — Fri, 11 Dec 2009 15:26:28 +0000

“Data Transfer Interrupted
The connection to workace.vasatherm.com was interrupted while the page was loading.
The browser connected successfully, but the connection was interrupted while transferring information. Please try again.
* Are you unable to browse other sites? Check the computer’s network connection.
* Still having trouble? Consult your network administrator or Internet provider for assistance.”

Was this issue ever resolved? We’ve been running simple load testing on our ELB using ab and httperf, and we seem to be getting similar errors. (ab reports differing response length on a page that should be static) We see these errors only when testing on the ELB, and we haven’t yet tested SSL. Further, we see these errors occurring more and more frequently as we increase concurrency.

Thanks!
Josh

By: guneet

guneet — Tue, 01 Dec 2009 01:13:55 +0000

i have setup the load balancer the way its described int eh article
the heathcheck shows that lb is inService

however i cannot get to the page
i have added CNAME for the subdomain as the dns name of the load balancer.

do i need to create any A record as well
do i need to mention the lb dns name in the hostheader o fthe IIS server ?