How to setup SSL in AWS LB?

dave-the-developer · May 31, 2024, 11:54pm

Hi everyone! I deployed OpenReplay on EKS via Helm, but I’m confused on how to setup SSL in the Load Balancer.

OpenReplay Kubernetes deployment Docs basically redirects to AWS setup, in which we manually create an Application Load Balancer, but in Kubernetes the Load Balancer is created by Nginx Ingress controller, and OpenReplay seems to create its own ingress class which creates a Classic LB (not Application LB).

What is the recommendation? To just change ingress controller service type to NodePort and create the ALB via Terraform?

Or is it possible to make it work with NLB (which is supported by nginx controller)?

Sorry for so many questions, and thanks in advance!!!

mehdi · May 31, 2024, 11:54pm

You can customise the lb behaviour using annotations here:

github.com

rjshrjndrn/openreplay/blob/de929dc5ea1c2752cdf777b4bcc9423af152971e/scripts/helmcharts/vars.yaml#L85


      
              name: openreplay
          # -- For backwards compatibility with ingress.class annotation, use ingressClass.
          # Algorithm is as follows, first ingressClassName is considered, if not present, controller looks for ingress.class annotation
            ingressClass: openreplay
            addHeaders:
              # Enable only if you know what you're doing!!!
              # X-Frame-Options: "DENY"
              X-XSS-Protection: "1; mode=block"
              X-Content-Type-Options: "nosniff"
              Referrer-Policy: "same-origin"
            service:
              externalTrafficPolicy: "Local"
              ports:
                http: 80
                https: 443
            extraArgs:
              default-ssl-certificate: "app/openreplay-ssl"
            config:
              use-gzip: true
              load-balance: ewma
              enable-real-ip: true

More on annotations here:
https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/guide/service/annotations/

faelannm · August 20, 2024, 9:37am

thanks for this reply this is very useful for me

Topic		Replies	Views
How to configure EKS as an internet-facing NLB or ALB Community Guides	1	41	April 4, 2024
LetsEncrypt cert creation failing when on private network? Issues & Bugs	1	25	June 3, 2024
How to update PVC name in Kubernetes? 🛠️ Deployment kubernetes	1	37	May 31, 2024
Do we need ReadWriteMany volume on k8s for deploying OpenReplay? 🛠️ Deployment deployment	1	113	March 22, 2024
Can the endpoint URL be separated from the admin console for security? 🛠️ Deployment deployment , session-replay	1	37	April 21, 2024

How to setup SSL in AWS LB?

Related Topics