Elastic Load Balancing - AWS Documentation

1 Elastic load BalancingClassic load BalancersElastic load Balancing : Classic load BalancersCopyright 2020 Amazon Web Services, Inc. and/or its affiliates. All rights load Balancing Classic load BalancersAmazon's trademarks and trade dress may not be used in connection with any product or service that is notAmazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages ordiscredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who mayor may not be affiliated with, connected to, or sponsored by load Balancing Classic load BalancersTable of ContentsWhat is a Classic load Balancer?

2 1 Classic load Balancer overview .. 2 How to get started .. 2 Tutorial: Create a Classic load Balancer .. 3 Before you begin .. 3 Step 1: Select a load balancer type .. 3 Step 2: Define your load balancer .. 4 Step 3: Assign security groups to your load balancer in a VPC .. 5 Step 4: Configure health checks for your EC2 instances .. 5 Step 5: Register EC2 instances with your load balancer .. 6 Step 6: Tag your load balancer (optional) .. 6 Step 7: Create and verify your load balancer .. 6 Step 8: Delete your load balancer (optional).

3 7 Internet-facing load balancers .. 8 Public DNS names for your load balancer .. 8 Create an internet-facing load balancer .. 9 Internal load balancers .. 10 Public DNS name for your load balancer .. 10 Create an internal load balancer .. 11 Prerequisites .. 11 Create an internal load balancer using the console .. 11 Create an internal load balancer using the AWS CLI .. 12 Registered instances .. 14 Best practices for your instances .. 14 Prepare your VPC and EC2 instances .. 14 Configure health checks .. 15 Health check configuration.

4 16 Update the health check configuration .. 17 Check the health of your instances .. 18 Troubleshoot health checks .. 18 Configure security groups .. 18 Security groups for load balancers in a VPC .. 19 Security groups for instances in a VPC .. 21 Network ACLs for load balancers in a VPC .. 21 Security groups for instances in EC2-Classic .. 23 Add or remove Availability Zones .. 25 Add an Availability Zone .. 26 Remove an Availability Zone .. 26 Add or remove subnets .. 27 Requirements .. 27 Add a subnet .. 28 Remove a subnet.

5 28 Register or deregister instances .. 29 Prerequisites .. 30 Register an instance .. 30 Deregister an instance .. 32 Protocols .. 32 TCP/SSL protocol .. 33 HTTP/HTTPS protocol .. 33 HTTPS/SSL listeners .. 33 SSL server certificates .. 33iiiElastic load Balancing Classic load BalancersSSL negotiation .. 34 Back-end server authentication .. 34 Listener configurations .. 34X-forwarded headers .. 35X-Forwarded-For .. 36X-Forwarded-Proto .. 36X-Forwarded-Port .. 37 HTTPS listeners .. 38 SSL/TLS certificates .. 38 Create or import an SSL/TLS certificate using AWS Certificate Manager.

6 39 Import an SSL/TLS certificate using 39 SSL negotiation configurations .. 39 Security policies .. 39 SSL protocols .. 40 Server Order Preference .. 40 SSL ciphers .. 41 Predefined SSL security policies .. 43 Create an HTTPS load balancer .. 45 Prerequisites .. 46 Create an HTTPS/SSL load balancer using the console .. 46 Create an HTTPS/SSL load balancer using the AWS CLI .. 51 Configure an HTTPS listener .. 59 Prerequisites .. 59 Add an HTTPS listener using the console .. 60 Add an HTTPS listener using the AWS CLI .. 60 Replace the SSL certificate.

7 62 Replace the SSL certificate using the console .. 62 Replace the SSL certificate using the AWS CLI .. 63 Update the SSL negotiation configuration .. 63 Update the SSL negotiation configuration using the console .. 64 Update the SSL negotiation configuration using the AWS CLI .. 65 Configure your load balancer .. 68 Configure the idle timeout .. 68 Configure the idle timeout using the console .. 68 Configure the idle timeout using the AWS CLI .. 69 Configure cross-zone load Balancing .. 69 Enable cross-zone load Balancing .. 70 Disable cross-zone load Balancing .

8 71 Configure connection draining .. 72 Enable connection draining .. 72 Disable connection draining .. 73 Configure proxy protocol .. 74 Proxy protocol header .. 74 Prerequisites for enabling proxy protocol .. 75 Enable proxy protocol using the AWS CLI .. 75 Disable proxy protocol using the AWS CLI .. 76 Configure sticky sessions .. 77 Duration-based session 78 Application-controlled session stickiness .. 80 Tag your load balancer .. 81 Tag restrictions .. 82 Add a tag .. 82 Remove a tag .. 82 Configure the domain name .. 83 Associating your custom domain name with your load balancer name.

9 83 Configure DNS failover for your load balancer .. 84 Disassociating your custom domain name from your load balancer .. 85ivElastic load Balancing Classic load BalancersMonitor your load balancer .. 86 CloudWatch metrics .. 86 Classic load Balancer metrics .. 87 Metric dimensions for Classic load Balancers .. 91 Statistics for Classic load Balancer metrics .. 91 View CloudWatch metrics for your load balancer .. 92 Create CloudWatch alarms for your load balancer .. 93 Access logs .. 94 Access log files .. 94 Access log entries .. 95 Processing access logs.

10 98 Enable access logs .. 98 Disable access logs .. 103 CloudTrail logs .. 104 Elastic load Balancing information in CloudTrail .. 104 Understanding Elastic load Balancing log file 105 Troubleshoot your load balancer .. 107 API errors .. 108 CertificateNotFound: Undefined .. 108 OutofService: A transient error occurred .. 108 HTTP errors .. 109 HTTP 400: BAD_REQUEST .. 109 HTTP 405: METHOD_NOT_ALLOWED .. 109 HTTP 408: Request timeout .. 110 HTTP 502: Bad gateway .. 110 HTTP 503: Service unavailable .. 110 HTTP 504: Gateway timeout.