AWS elasticloadbalancing documentation change
Summary
Updated IP address type documentation for Network Load Balancer target groups, clarifying IPv4/IPv6 communication requirements and adding restrictions
Security assessment
Changes clarify operational requirements for IP version compatibility but do not address vulnerabilities or security controls. The added restriction about Application Load Balancers with IPv6 groups is a functional limitation.
Diff
diff --git a/elasticloadbalancing/latest/network/load-balancer-target-groups.md b/elasticloadbalancing/latest/network/load-balancer-target-groups.md index 509f60a31..86aa93e6e 100644 --- a//elasticloadbalancing/latest/network/load-balancer-target-groups.md +++ b//elasticloadbalancing/latest/network/load-balancer-target-groups.md @@ -163 +163,5 @@ For more information about AWS Site-to-Site VPN, see [What is AWS Site-to-Site V -When creating a new target group, you can select the IP address type of your target group. This controls the IP version used to communicate with targets and check their health status. Network Load Balancers support both IPv4 and IPv6 target groups. +When creating a new target group, you can select the IP address type of your target group. This controls the IP version used to communicate with targets and check their health status. + +Target groups for your Network Load Balancers support the following IP address types: + +**`ipv4`** @@ -165 +168,0 @@ When creating a new target group, you can select the IP address type of your tar -###### Considerations @@ -167 +170 @@ When creating a new target group, you can select the IP address type of your tar - * All IP addresses within a target group must have the same IP address type. For example, you can't register an IPv4 target with an IPv6 target group. +The load balancer communicates with targets using IPv4. @@ -169 +172 @@ When creating a new target group, you can select the IP address type of your tar - * IPv6 target groups support IP and instance type targets. +**`ipv6`** @@ -171 +174,8 @@ When creating a new target group, you can select the IP address type of your tar - * You must use an IPv6 target group with a `dualstack` load balancer. + +The load balancer communicates with targets using IPv6. + +###### Considerations + + * The load balancer communicates with targets based on the IP address type of the target group. The targets of an IPv4 target group must accept IPv4 traffic from the load balancer and the targets of an IPv6 target group must accept IPv6 traffic from the load balancer. + + * You can't use an IPv6 target group with an `ipv4` load balancer. @@ -174,0 +185,2 @@ When creating a new target group, you can select the IP address type of your tar + * You can't register an Application Load Balancer with an IPv6 target group. +