AWS VPC & Subnet Strategy

Strategy when you need outbound on ECS (ECS-Fargate)

requirements

• use Fargate

• need static outbound IP

Limitation

• Fargate can't get outbound IP or can't assign Elastic IP

Idea

• use NAT gateway as a proxy server for assigning Static IP address

Solution

• make two subnets. Public subnet for NAT gateway, -> Private subnet for Fargate service

• run Fargate service on Private subnet

• assign NAT gateway to Public subnet

• connect NAT gateway to Private subnet

• EC2 case -https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-scenarios.html

• ECS Fargate case - https://aws.amazon.com/blogs/compute/task-networking-in-aws-fargate/

Checklist

Network

• Creat two subnet

• create Elastic IP

Reference - for Fargate setup

Task Networking in AWS Fargate | Amazon Web ServicesAmazon Web Services

Run Amazon ECS tasks on Fargate in a private subnetAmazon Web Services, Inc.

Tutorial: Creating a VPC with Public and Private Subnets for Your Clusters - Amazon ECSAmazon ECS

Reference - for EC2

• create VPC

  • will generate public/private subnet together

  • choose Elastic IP for NAT gateway

• goto EC2 console

  • Load Balancers

  • create Load Balancer

    • any type of LB, in example choose classic load balancer

    • select VPC,

    • select Public Subnet (that we made just before)

    • create new security group

• create EC2