# How to setup SSL in AWS LB?

**URL:** <https://forum.openreplay.com/t/how-to-setup-ssl-in-aws-lb/107>\
**Category:** 🛠️ Deployment\
**Tags:** kubernetes\
**Created:** [May 31, 2024, 11:54pm UTC](https://forum.openreplay.com/t/how-to-setup-ssl-in-aws-lb/107 "2024-05-31T23:54:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dave-the-developer](https://avatars.discourse-cdn.com/v4/letter/d/7ab992/32.png) [@dave-the-developer](https://forum.openreplay.com/u/dave-the-developer)\
**Post date:** [May 31, 2024, 11:54pm UTC](https://forum.openreplay.com/t/how-to-setup-ssl-in-aws-lb/107/1 "2024-05-31T23:54:25Z")

</div>

Hi everyone! I deployed OpenReplay on EKS via Helm, but I’m confused on how to setup SSL in the Load Balancer.

OpenReplay Kubernetes deployment Docs basically redirects to AWS setup, in which we manually create an Application Load Balancer, but in Kubernetes the Load Balancer is created by Nginx Ingress controller, and OpenReplay seems to create its own ingress class which creates a Classic LB (not Application LB).

What is the recommendation? To just change ingress controller service type to `NodePort` and create the ALB via Terraform?

Or is it possible to make it work with NLB (which is supported by nginx controller)?

Sorry for so many questions, and thanks in advance!!!

---

<div class="post-metadata">

**Author:** ![mehdi](https://dub1.discourse-cdn.com/flex006/user_avatar/forum.openreplay.com/mehdi/32/50_2.png) [@mehdi](https://forum.openreplay.com/u/mehdi)\
**Post date:** [May 31, 2024, 11:54pm UTC](https://forum.openreplay.com/t/how-to-setup-ssl-in-aws-lb/107/2 "2024-05-31T23:54:52Z")

</div>

You can customise the lb behaviour using `annotations` here:

> <https://github.com/rjshrjndrn/openreplay/blob/de929dc5ea1c2752cdf777b4bcc9423af152971e/scripts/helmcharts/vars.yaml#L85>

More on annotations here:  
[https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/guide/service/annotations/](https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/guide/service/annotations/)

---

<div class="post-metadata">

**Author:** ![faelannm](https://dub1.discourse-cdn.com/flex006/user_avatar/forum.openreplay.com/faelannm/32/60_2.png) [@faelannm](https://forum.openreplay.com/u/faelannm)\
**Post date:** [August 20, 2024, 9:37am UTC](https://forum.openreplay.com/t/how-to-setup-ssl-in-aws-lb/107/3 "2024-08-20T09:37:16Z")

</div>

thanks for this reply this is very useful for me