Question

A company is migrating an on-premises TCP-based payment processing application to AWS. Their downstream partners require whitelisting a small set of fixed IP addresses for inbound connections, and the backend fraud-detection service needs to see the original client source IP address for each request. The CloudOps engineer must expose the application through a load balancer that satisfies both requirements. Which solution meets these needs?

Accepted Answer

Deploy a Network Load Balancer with an Elastic IP assigned per subnet, and register targets by instance ID so client source IP is preserved.

Answer

Deploy an Application Load Balancer and enable the X-Forwarded-For header so partners can whitelist the ALB's DNS name.

Answer

Deploy a Network Load Balancer with targets registered by IP address, and enable Proxy Protocol v2 to obtain a static set of load balancer IPs.

Answer

Deploy an Application Load Balancer behind a Global Accelerator and register targets by instance ID to preserve the source IP.