aws-load-balancer-controller icon indicating copy to clipboard operation
aws-load-balancer-controller copied to clipboard

Support for NLBs targeting ALBs

Open gshutler opened this issue 3 years ago • 19 comments

A few weeks ago it was announced that NLBs could now use and Application Load Balancer-type Target Group (docs).

We are currently using the previously documented workaround involving Lambda which this feature is intended to replace and would love to switch to the new method.

gshutler avatar Oct 15 '21 16:10 gshutler

/kind feature

kishorj avatar Oct 15 '21 18:10 kishorj

@gshutler, thanks for bringing it to our attention. We have been considering this feature post v2.3.0 release.

kishorj avatar Oct 15 '21 18:10 kishorj

Oh this is critical for an architecture I'm working on!

kurtbomya avatar Jan 10 '22 17:01 kurtbomya

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue or PR as fresh with /remove-lifecycle stale
  • Mark this issue or PR as rotten with /lifecycle rotten
  • Close this issue or PR with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Apr 10 '22 17:04 k8s-triage-robot

/remove-lifecycle stale

jsokol89 avatar Apr 11 '22 06:04 jsokol89

We're wanting this feature to get implemented as well. Our use case might be useful to others:

  • We need static IP addresses so we are using an NLB
  • We have been using an ALB and would like to continue with it for most of our traffic
  • For the app the requires the static IP's: -- we let the NLB terminate TLS connections -- we redirect HTTP to HTTPS by manually adding the ALB as a target group for the NLB

This works well, as I don't have to do anything special other than create/add a target group to the NLB and avoids having to put something behind (or in front of) the NLB to redirect to HTTPS.

However, some event eventually causes the manual configuration to get removed. Implementing this feature will allow us to remove the problematic manual configuration.

sunild avatar May 09 '22 17:05 sunild

bump

wallhided avatar Jun 16 '22 11:06 wallhided

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue or PR as fresh with /remove-lifecycle stale
  • Mark this issue or PR as rotten with /lifecycle rotten
  • Close this issue or PR with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Sep 14 '22 12:09 k8s-triage-robot

The Kubernetes project currently lacks enough active contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

  • Mark this issue or PR as fresh with /remove-lifecycle rotten
  • Close this issue or PR with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle rotten

k8s-triage-robot avatar Oct 14 '22 12:10 k8s-triage-robot

/remove-lifecycle rotten

andrei693 avatar Nov 02 '22 13:11 andrei693

The Kubernetes project currently lacks enough contributors to adequately respond to all PRs.

This bot triages PRs according to the following rules:

  • After 90d of inactivity, lifecycle/stale is applied
  • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
  • After 30d of inactivity since lifecycle/rotten was applied, the PR is closed

You can:

  • Mark this PR as fresh with /remove-lifecycle stale
  • Close this PR with /close
  • Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

k8s-triage-robot avatar Feb 08 '23 11:02 k8s-triage-robot

/remove-lifecycle stale

sunild avatar Feb 08 '23 17:02 sunild

This too is a feature I could use. create a nlb and define the target for a port to a alb. Is this still on the roadmap?

45cali avatar Aug 09 '23 17:08 45cali

Also have interest in this feature. It is a surprise when looking to configure the NLB that I can use other target types but not ALB.

limoges avatar Aug 29 '23 10:08 limoges

This is would be ideal for architectures using private link and API gateway VPC link, such as: https://aws.amazon.com/blogs/networking-and-content-delivery/application-load-balancer-type-target-group-for-network-load-balancer/

Currently looks like we will have create a shared NLB and target group + binding in terraform to achieve this.

NLB/TargetGroup CRDs or a dummy service to chain NLB -> ALB could be an option

philstevenson avatar Feb 16 '24 12:02 philstevenson

We would also like to use this feature. Any updates ? Anyone actively working on this ? Issue is open for 900 days

oprinmarius avatar Mar 31 '24 17:03 oprinmarius

+1 for this feature to create NLB and set target group to an ALB.

eugenejen avatar Apr 02 '24 18:04 eugenejen