Does the cluster support several ELBs ?

[netflash]

Hi there,

here's my desired configuration

Internet-facing ELB (public subnets) (swarm managed) → docker swarm cluster (private subnets)
Internal ELB (private subnets) (swarm managed) → same docker swarm cluster (private subnets)

I would like to get this configuration to reach the following goals:

• run public-facing services on the cluster (should be reached from Internet)
• run private-facing services on the cluster (should be reached from the same VPC or site-to-site VPN, etc)
• run mixed-mode service on the cluster which should be reached both from Internet and site-to-site VPC

Right now I can't reach them. If I configure ELB to be internet-facing - I can't limit access to internal clients, as internet-facing ELB has public IPs, and some internal clients can't access the internet at all. If I configure ELB to be internal - I have to create an additional infrastructure which will preface this ELB, e.g.

Internet-facing ELB -> public instance (or several instances in ASG) with nginx/haproxy/etc -> internal ELB -> docker swarm cluster in private subnets