Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Deployment Models with AWS Elastic IPs and NLB

    Posted 12-15-2022 11:21
    Hi,

    Are there any links to documentation/best practices/guides on setting up the Cloud WAF where the domain name is in Route53 as an A record which then distributes traffic across 3 Elastic IPs which are attached to a NLB?

    I cannot find anything in the main guides that cover the above. We utilise a NLB as we need to accept traffic at Layer 4 and not just Layer 7. The use of Elastic IPs is so that our clients can whitelist the IPs (if needed) in their Firewalls.

    Thanks.
    #CloudWAF(formerlyIncapsula)

    ------------------------------
    Steve Richards

    ------------------------------


  • 2.  RE: Deployment Models with AWS Elastic IPs and NLB

    Posted 12-19-2022 07:07
    Anyone with any recommendations?

    ------------------------------
    Steven Richards
    Engineer
    Mirantis Inc.
    Campbell CA
    ------------------------------



  • 3.  RE: Deployment Models with AWS Elastic IPs and NLB

    Posted 12-20-2022 14:32
    I haven't used Route53 custom A records, but we use many origins with hostnames, generally CNAME records. For your situation, you could treat them as one "DNS name" origin, and that should work pretty well.

    Elastic IPs would be ideal for Imperva Cloud WAF Edge Load Balancing, if you have that feature in your subscription, but you're probably not trying to re-architect your system.

    ------------------------------
    David Sloane
    VP Production IT
    Bonterra LLC
    MA
    ------------------------------