配置TCP傳遞一個可彈性青苗環境的負載均衡與配置文件（.ebextensions）

Question

定製VPC我已經嘗試按照這個特定文檔

http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/https-tcp-passthrough.html

沒有運氣我的特殊需要。需要的是從代理服務器到ELB的第4層TCP傳遞，直到Tomcat後端才終止SSL。入口端口是TCP 443，出口是8443.還需要使用自定義VPC而不是默認值。這怎麼能通過配置文件來完成？

Answer 1

我可以用下面的配置文件來解決：

HTTPS的實例balancer.config

{ 
     "Resources": { 
      "AWSEBSecurityGroup": { 
       "Type": "AWS::EC2::SecurityGroup", 
       "Properties": { 
        "VpcId": "vpc-xxxxxxxx", 
        "GroupDescription": "EC28443Ingress", 
        "SecurityGroupIngress": [ 
         { 
          "IpProtocol": "tcp", 
          "FromPort": 8443, 
          "ToPort": 8443, 
          "CidrIp": "0.0.0.0/0" 
         } 
        ] 
       } 
      }, 
      "AWSEBLoadBalancerSecurityGroup": { 
       "Type": "AWS::EC2::SecurityGroup", 
       "Properties": { 
        "VpcId": "vpc-xxxxxxxx", 
        "GroupDescription": "ELB443and8443Ingress", 
        "SecurityGroupIngress": [ 
         { 
          "IpProtocol": "tcp", 
          "FromPort": 443, 
          "ToPort": 443, 
          "CidrIp": "0.0.0.0/0" 
         } 
        ], 
        "SecurityGroupEgress": [ 
         { 
          "IpProtocol": "tcp", 
          "FromPort": 8443, 
          "ToPort": 8443, 
          "CidrIp": "0.0.0.0/0" 
         } 
        ] 
       } 
      }, 
      "AWSEBLoadBalancer": { 
       "Type": "AWS::ElasticLoadBalancing::LoadBalancer", 
       "Properties": { 
        "Listeners": [ 
         { 
          "LoadBalancerPort": 443, 
          "Protocol": "TCP", 
          "InstancePort": 8443, 
          "InstanceProtocol": "TCP" 
         } 
        ], 
        "SecurityGroups": [ 
         { 
          "Fn::GetAtt": [ 
           "AWSEBLoadBalancerSecurityGroup", 
           "GroupId" 
          ] 
         } 
        ] 
       } 
      } 
     } 
    } 

HTTPS-LB-passthrough.config

{ 
     "option_settings": { 
     "aws:elb:listener:443": { 
      "ListenerProtocol": "TCP", 
      "InstancePort": 8443, 
      "InstanceProtocol": "TCP" 
     }, 
     "aws:elb:healthcheck": { 
      "Target": "TCP:8443" 
     } 
     } 
    } 

這大概可以用Terraform等軟件更容易完成，但對某些人來說這可能不是一種選擇。