jeudi 26 mars 2015

Stop Elastic Load Balancer From Revealing Internal Private IP

It's come to my attention that the internal IP of ec2 instances behind an ELB, even when in a private subnet, are revealed when a particular type of request is issued.



telnet site_url 80
GET / HTTP/1.0


And the returned headers:



HTTP/1.1 301 Moved Permanently
Cache-Control: max-age=1209600
Content-Type: text/html; charset=iso-8859-1
Date: Thu, 26 Mar 2015 18:47:22 GMT
Expires: Thu, 09 Apr 2015 18:47:22 GMT
Location: https://10.0.7.35/
Server: Apache
Content-Length: 226
Connection: Close


Naturally this occurs with an open ssl request on 443 as well.


Is anyone aware of a resolution or workout for this problem? I know IIS suffers from the same symptoms but my problem is specific to AWS ELBs.





Aucun commentaire:

Enregistrer un commentaire