Is it possible to do Load Balancing in AWS if the instance has only private IP?

Question

Amazon Web Services

Hello everyone,

Just curious and actually speaking the question is in the title... but I'll add that I want to balance the frontend as well... backend is it possible?!

Without clever advice like put the frontend on S3 if this frontend is running on the client, etc.))

Answer 1

Yes, everything works great. This is called multi-tier load balancing
The first picture I came across from the Internet:

Moreover, I will say that when using ELB, not only is it not necessary to have a public IP, but in general http traffic from the Internet to this network should be closed

Answer 2

In general, from a security point of view, it is highly recommended to separate networks, and keep applications and their data on subnets to which there is no direct access from the Internet. For
example (also a relatively random picture),
so I would supplement Ivan Shumov 's answer like this:
external load balancer (Haproxy, Nginx, etc ..) it is best to organize your VPC so that all balanced servers are in private subnets, and only the balancer, NAT and VPN\Bastion are in the public subnet
In the base case (using default VPC) can be limited direct access to servers, as advised by Ivan Shumov