Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(elasticloadbalancingv2): add details about Network Load Balancer and EC2 IConnectable interface. #31704

Merged
merged 3 commits into from
Oct 14, 2024
Merged

chore(elasticloadbalancingv2): add details about Network Load Balancer and EC2 IConnectable interface. #31704

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
410ef8b
chore(elasticloadbalancingv2): add details about Network Load Balance…
ashishdhingra Oct 9, 2024
377acdf
Merge branch 'main' into user/ashdhin/nlb-ec2-connections-issue31644
mergify[bot] Oct 14, 2024
a479ebb
Merge branch 'main' into user/ashdhin/nlb-ec2-connections-issue31644
ashishdhingra Oct 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions packages/aws-cdk-lib/aws-elasticloadbalancingv2/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -422,6 +422,23 @@ const listener = lb.addListener('Listener', {
});
```

### Network Load Balancer and EC2 IConnectable interface
Network Load Balancer implements EC2 `IConnectable` and exposes `connections` property. EC2 Connections allows manage the allowed network connections for constructs with Security Groups. This class makes it easy to allow network connections to and from security groups, and between security groups individually. One thing to keep in mind is that network load balancers do not have security groups, and no automatic security group configuration is done for you. You will have to configure the security groups of the target yourself to allow traffic by clients and/or load balancer instances, depending on your target types.

```ts
declare const vpc: ec2.Vpc;
declare const sg1: ec2.ISecurityGroup;
declare const sg2: ec2.ISecurityGroup;

const lb = new elbv2.NetworkLoadBalancer(this, 'LB', {
vpc,
internetFacing: true,
securityGroups: [sg1],
});
lb.addSecurityGroup(sg2);
lb.connections.allowFromAnyIpv4(ec2.Port.tcp(80));
```

## Targets and Target Groups

Application and Network Load Balancers organize load balancing targets in Target
Expand Down