{"id":20697508,"url":"https://github.com/epomatti/aws-nlb-vpce","last_synced_at":"2026-05-17T00:08:35.978Z","repository":{"id":189834783,"uuid":"681399111","full_name":"epomatti/aws-nlb-vpce","owner":"epomatti","description":"AWS Network Load Balancer (NLB) with both public and VPC Endpoint","archived":false,"fork":false,"pushed_at":"2023-09-10T23:40:41.000Z","size":136,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-03-11T02:51:14.342Z","etag":null,"topics":["aws","aws-security","ec2","network-load-balancer","nlb","terraform","vpc","vpc-endpoint-service","vpc-endpoints","vpce","vpces"],"latest_commit_sha":null,"homepage":"","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/epomatti.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-08-21T23:56:44.000Z","updated_at":"2023-09-10T23:24:06.000Z","dependencies_parsed_at":"2024-11-17T00:32:15.085Z","dependency_job_id":null,"html_url":"https://github.com/epomatti/aws-nlb-vpce","commit_stats":null,"previous_names":["epomatti/aws-nlb"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/epomatti/aws-nlb-vpce","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epomatti%2Faws-nlb-vpce","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epomatti%2Faws-nlb-vpce/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epomatti%2Faws-nlb-vpce/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epomatti%2Faws-nlb-vpce/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/epomatti","download_url":"https://codeload.github.com/epomatti/aws-nlb-vpce/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/epomatti%2Faws-nlb-vpce/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279001435,"owners_count":26083078,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-09T02:00:07.460Z","response_time":59,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","aws-security","ec2","network-load-balancer","nlb","terraform","vpc","vpc-endpoint-service","vpc-endpoints","vpce","vpces"],"created_at":"2024-11-17T00:18:45.048Z","updated_at":"2025-10-09T12:34:36.989Z","avatar_url":"https://github.com/epomatti.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# AWS Network Load Balancer (NLB)\n\nIn order to create this infrastructure, verify the ACM certificate and also use a CNAME for the NLP matching the certificate domain.\n\n\u003cimg src=\".assets/nlb.png\" /\u003e\n\nThis NLP implementation uses [ALPN][1]:\n\n\u003e Using ALPN policies, you can now offload your application’s TLS HTTP/2 traffic decryption/encryption to the Network Load Balancer, improving your service security posture and reducing operational complexity.\n\nAdditionally, this code will also provision a VPC Endpoint Service and a connected VPC Endpoint for private connection with the Network Load Balancer.\n\n\u003cimg src=\".assets/nlb-vpce.png\" /\u003e\n\nCreate the resources:\n\n```sh\nterraform init\nterraform apply -auto-approve\n```\n\n⚠️ The script is intended to fail when creating the VCP Endpoint. You'll need to verify the VPC Endpoint Service DNS prior to continuing.\n\nTo connect to the jump server from your local box:\n\n```sh\naws ssm start-session --target i-00000000000000000\n```\n\nAdditional information regarding NLBs:\n\n- NLB supports [TLS termination][2], allowing it to use either `TLS` (forward the TLS) or `TCP` (terminates the TLS) target protocols, depending on the solution requirements.\n- ALPN assists in the TLS negotiation to determine the protocol version.\n- SNI allows and NLB listener to serve for multiple domains over TLS.\n\n[1]: https://aws.amazon.com/about-aws/whats-new/2020/05/network-load-balancer-now-supports-tls-alpn-policies/\n[2]: https://aws.amazon.com/blogs/aws/new-tls-termination-for-network-load-balancers/\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fepomatti%2Faws-nlb-vpce","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fepomatti%2Faws-nlb-vpce","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fepomatti%2Faws-nlb-vpce/lists"}