QuestionQ257

Network Design

A company is rolling out a new application in the AWS Cloud. The company requires a highly available web server behind an Elastic Load Balancer. The load balancer must route requests to multiple target groups according to the URL in each request. All traffic must use HTTPS. TLS processing must be offloaded to the load balancer. The web server must know the user’s IP address so that the company can maintain accurate security logs.

Which solution meets these requirements?

  • A Deploy an Application Load Balancer with an HTTPS listener. Use path-based routing rules to forward the traffic to the correct target group. Include the X-Forwarded-For request header with traffic to the targets.
  • B Deploy an Application Load Balancer with an HTTPS listener for each domain. Use host-based routing rules to forward the traffic to the correct target group for each domain. Include the X-Forwarded-For request header with traffic to the targets.
  • C Deploy a Network Load Balancer with a TLS listener. Use path-based routing rules to forward the traffic to the correct target group. Configure client IP address preservation for traffic to the targets.
  • D Deploy a Network Load Balancer with a TLS listener for each domain. Use host-based routing rules to forward the traffic to the correct target group for each domain. Configure client IP address preservation for traffic to the targets.
Explanation

An Application Load Balancer supports Layer 7 path-based routing to target groups. Its HTTPS listener terminates TLS at the load balancer, and it forwards the client IP address to targets in the X-Forwarded-For header. A Network Load Balancer cannot perform path-based routing because it uses Layer 4 listeners.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!