AWS elasticloadbalancing documentation change

Service: elasticloadbalancing · 2025-11-16 · Documentation medium

File: elasticloadbalancing/latest/network/create-listener.md

Summary

Added documentation for QUIC/TCP_QUIC listener protocols including restrictions (no security groups, no dualstack, single listener limit, incompatibility with UDP/TCP_UDP listeners) and configuration examples

Security assessment

The changes introduce protocol-specific constraints (security group limitations and architectural restrictions) that impact security posture but do not address a specific disclosed vulnerability. The security group prohibition requires users to implement alternative network security controls.

Diff

diff --git a/elasticloadbalancing/latest/network/create-listener.md b/elasticloadbalancing/latest/network/create-listener.md
index 094b5f70f..d13a98f4a 100644
--- a//elasticloadbalancing/latest/network/create-listener.md
+++ b//elasticloadbalancing/latest/network/create-listener.md
@@ -18,0 +19,8 @@ A listener is a process that checks for connection requests. You define a listen
+  * QUIC and TCP_QUIC listeners are not allowed on `dualstack` load balancers or load balancers with associated security groups.
+
+  * QUIC and TCP_QUIC listeners are not allowed on load balancers with associated security groups.
+
+  * Only one QUIC or TCP_QUIC listener is allowed on an Network Load Balancer at any given time.
+
+  * QUIC and TCP_QUIC listeners are not allowed on an Network Load Balancer that has UDP or TCP_UDP listeners.
+
@@ -39 +47 @@ Console
-  5. For **Protocol** , choose **TCP** , **UDP** , **TCP_UDP** , or **TLS**. Keep the default port or type a different port.
+  5. For **Protocol** , choose **TCP** , **UDP** , **TCP_UDP** , **TLS** , **QUIC** , or **TCP_QUIC**. Keep the default port or type a different port.
@@ -103,0 +112,11 @@ Use the [create-listener](https://docs.aws.amazon.com/cli/latest/reference/elbv2
+###### To add a QUIC listener
+
+Use the [create-listener](https://docs.aws.amazon.com/cli/latest/reference/elbv2/create-listener.html) command specifying the QUIC protocol.
+    
+    
+    aws elbv2 create-listener \
+        --load-balancer-arn load-balancer-arn \
+        --protocol QUIC \
+        --port 443 \
+        --default-actions Type=forward,TargetGroupArn=target-group-arn
+
@@ -157,0 +177,16 @@ Define a resource of type [AWS::ElasticLoadBalancingV2::Listener](https://docs.a
+###### To add a QUIC listener
+
+Define a resource of type [AWS::ElasticLoadBalancingV2::Listener](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-listener.html) using the QUIC protocol.
+    
+    
+    Resources:
+      myQUICListener:
+        Type: 'AWS::ElasticLoadBalancingV2::Listener'
+        Properties:
+          LoadBalancerArn: !Ref myLoadBalancer
+          Protocol: QUIC
+          Port: 443
+          DefaultActions:
+            - Type: forward
+              TargetGroupArn: !Ref myTargetGroup
+