Reputation: 111
Suppose we have an application running on an EC2 instance in a load-balanced Elastic Beanstalk stack. And this application wants to (1) call web services served by external hosts, and/or (2) open secured TN5250 (i.e, 5250 data stream over SSL-secured Telnet) sessions on external hosts.
Is there a way we can give those external hosts a reliable IP address range from which to expect our traffic?
(Cross-posted to the AWS EC2 developer forum.)
Upvotes: 1
Views: 1717
Reputation: 269131
If the Amazon EC2 instances are in a private subnet, then you will need a NAT Gateway in a public subnet to provide them with Internet access. An Elastic IP address is associated with the NAT Gateway, which remains static and can be used for whitelisting. All outbound traffic from the instances will come from the NAT Gateway's IP address.
If the Amazon EC2 instances are in a public subnet and require a static IP address, they will each require their own Elastic IP address. Please note that there are limits on the number of Elastic IP addresses in your account.
Upvotes: 2