A company is deploying a media transcoding service on Amazon EC2 instances managed by an Auto Scaling group (ASG) behind an Application Load Balancer (ALB). The transcoding service listens on TCP port 8085, while the health status endpoint is exposed on TCP port 8086. The architecture must ensure that only healthy instances receive transcoding jobs, and inbound network access to the EC2 instances must be restricted to only the ALB. Which two configurations should the solutions architect implement to meet these requirements?
- Configure the target group to route traffic to port 8085, and explicitly set the health check port to 8086.Cevap
- Update the security group for the EC2 instances to allow inbound traffic from the security group of the Application Load Balancer on ports 8085 and 8086.Cevap
- CConfigure the target group health check to use the default 'traffic port' setting to verify application availability.
- DConfigure a Network ACL on the EC2 subnets to allow inbound traffic on ports 8085 and 8086 by referencing the security group ID of the Application Load Balancer.
- ECreate an Amazon Route 53 latency routing policy pointing directly to the EC2 instances to balance traffic prior to reaching the load balancer.
Cevap
Configure the target group to send traffic to port 8085 with the health check port explicitly set to 8086, and configure the EC2 instance security group to allow inbound traffic on both ports from the ALB's security group.
The system requires separate ports for health checks (8086) and transcoding traffic (8085). The target group must be configured with port 8085 for traffic and an explicit override of port 8086 for health checks. Additionally, security groups must allow the ALB to reach the EC2 instances on both ports to perform health checks and forward traffic.
Adım Adım Çözüm
Anahtar Kavram
Decoupling target group health checks and application traffic ports in load balancer configurations combined with security group chaining.
Tahmini Süre:1m 30s