Help Center/ Elastic Load Balance/ User Guide (Paris Region) / FAQ/ Backend Servers/ How Can I Check the Network Configuration of a Backend Server?
Updated on 2023-11-25 GMT+08:00
View PDF
Share

How Can I Check the Network Configuration of a Backend Server?

  1. Check whether the security group of the server is correctly configured.
    1. On the server details page, view the security group.
    2. Check whether the security group rules allow access from the corresponding IP address range.
      • Dedicated load balancers: Check whether the security group of the backend server has inbound rules to allow traffic from the VPC where the load balancer works. If traffic is not allowed, add an inbound rule to allow traffic from the VPC to the backend server.
      • Shared load balancers: Check whether the security group of the backend server has inbound rules to allow traffic from the 100.125.0.0/16 and 100.126.0.0/16. If traffic is not allowed, add an inbound rule to allow traffic from 100.125.0.0/16 and 100.126.0.0/16 to the backend server.
      • Shared load balancers: If Transfer Client IP Address is enabled for a TCP or UDP listener, there is no need to configure security group rules and Network ACL rules to allow traffic from 100.125.0.0/16, 100.126.0.0/16, and client IP addresses to backend servers.
      • Dedicated load balancers: If IP as a Backend is not enabled for a load balancer that has a TCP or UDP listener, there is no need to configure security group rules and Network ACL rules to allow traffic from the backend subnet where the load balancer is deployed to the backend servers.
  2. Ensure that the network ACLs of the subnet where the server resides does not intercept the traffic.

    In the navigation pane of the VPC console, choose Access Control > Network ACLs and check whether the subnet allows traffic.

Parent topic: Backend Servers