AWS global-accelerator medium security documentation change
Summary
Updated Network Load Balancer client IP preservation rules and dual-stack restrictions
Security assessment
Clarifies client IP preservation support for TCP/UDP (not TLS), which impacts security logging and access control configurations. This is a security-relevant configuration detail but does not address a specific vulnerability.
Diff
diff --git a/global-accelerator/latest/dg/about-endpoints-caveats.md b/global-accelerator/latest/dg/about-endpoints-caveats.md index 5b6f034b0..c60a55aab 100644 --- a//global-accelerator/latest/dg/about-endpoints-caveats.md +++ b//global-accelerator/latest/dg/about-endpoints-caveats.md @@ -44 +44 @@ Be aware of the following requirements and limitations for different types of re - * Client IP address preservation is not supported for Network Load Balancers that use TLS termination. + * Client IP address preservation is supported for Network Load Balancers with TCP and UDP listeners, but not with TLS termination. @@ -46,3 +46 @@ Be aware of the following requirements and limitations for different types of re - * Dual-stack Network Load Balancers can be added as endpoints, but there are a few restrictions: - - * For dual-stack accelerators, when you add a dual-stack Network Load Balancer, the Network Load Balancer cannot have a target group with a target type of `ip`, or a target type of `instance` and IP address type of `ipv6`. + * Dual-stack Network Load Balancers can be added as endpoints for IPv4 or dual-stack accelerators, but there are a few restrictions: