AWS elasticloadbalancing documentation change
Summary
Updated target group protocols, added QUIC-related configurations, and modified attribute behaviors for QUIC traffic
Security assessment
Changes document operational constraints (e.g., fixed 300s timeout for QUIC, IPv6 limitations) and protocol-specific behaviors. While client IP preservation enforcement for QUIC has security implications, this appears to be a configuration consistency update rather than a response to a specific security issue.
Diff
diff --git a/elasticloadbalancing/latest/network/load-balancer-target-groups.md b/elasticloadbalancing/latest/network/load-balancer-target-groups.md index fc85b635d..06c9feb9b 100644 --- a//elasticloadbalancing/latest/network/load-balancer-target-groups.md +++ b//elasticloadbalancing/latest/network/load-balancer-target-groups.md @@ -52 +52 @@ Target groups for Network Load Balancers support the following protocols and por - * **Protocols** : TCP, TLS, UDP, TCP_UDP + * **Protocols** : TCP, TLS, UDP, TCP_UDP, QUIC, TCP_QUIC @@ -65 +65 @@ Listener protocol | Target group protocol | Target group type | Health check pro -TCP | TCP | TCP_UDP | instance | ip | HTTP | HTTPS | TCP +TCP | TCP | TCP_UDP | TCP_QUIC | instance | ip | HTTP | HTTPS | TCP @@ -69,0 +70,2 @@ TCP_UDP | TCP_UDP | instance | ip | HTTP | HTTPS | TCP +QUIC | QUIC | TCP_QUIC | instance | ip | HTTP | HTTPS | TCP +TCP_QUIC | TCP_QUIC | instance | ip | HTTP | HTTPS | TCP @@ -186,0 +189,2 @@ The load balancer communicates with targets using IPv6. + * You can't use an IPv6 target group with QUIC or TCP_QUIC protocols. + @@ -212 +216 @@ If you are registering targets by instance ID, you can use your load balancer wi - * For UDP and TCP_UDP target groups, do not register instances by IP address if they reside outside of the load balancer VPC or if they use one of the following instance types: C1, CC1, CC2, CG1, CG2, CR1, G1, G2, HI1, HS1, M1, M2, M3, or T1. Targets that reside outside the load balancer VPC or use an unsupported instance type might be able to receive traffic from the load balancer but then be unable to respond. + * For UDP, TCP_UDP, QUIC, and TCP_QUIC target groups, do not register instances by IP address if they reside outside of the load balancer VPC or if they use one of the following instance types: C1, CC1, CC2, CG1, CG2, CR1, G1, G2, HI1, HS1, M1, M2, M3, or T1. Targets that reside outside the load balancer VPC or use an unsupported instance type might be able to receive traffic from the load balancer but then be unable to respond. @@ -226 +230 @@ The following target group attributes are supported. You can modify these attrib -The amount of time for Elastic Load Balancing to wait before changing the state of a deregistering target from `draining` to `unused`. The range is 0-3600 seconds. The default value is 300 seconds. +The amount of time for Elastic Load Balancing to wait before changing the state of a deregistering target from `draining` to `unused`. The range is 0-3600 seconds. The default value is 300 seconds. For QUIC traffic, the value is always 300 seconds. @@ -231 +235 @@ The amount of time for Elastic Load Balancing to wait before changing the state -Indicates whether the load balancer terminates connections at the end of the deregistration timeout. The value is `true` or `false`. For new UDP/TCP_UDP target groups the default is `true`. Otherwise, the default is `false`. +Indicates whether the load balancer terminates connections at the end of the deregistration timeout. The value is `true` or `false`. For new UDP/TCP_UDP target groups the default is `true`. Otherwise, the default is `false`. This attribute does not apply to QUIC traffic. @@ -241 +245 @@ Indicates whether cross zone load balancing is enabled. The value is `true`, `fa -Indicates whether client IP preservation is enabled. The value is `true` or `false`. The default is disabled if the target group type is IP address and the target group protocol is TCP or TLS. Otherwise, the default is enabled. Client IP preservation can't be disabled for UDP and TCP_UDP target groups. +Indicates whether client IP preservation is enabled. The value is `true` or `false`. The default is disabled if the target group type is IP address and the target group protocol is TCP or TLS. Otherwise, the default is enabled. Client IP preservation can't be disabled for UDP, TCP_UDP, QUIC, and TCP_QUIC target groups. @@ -251 +255 @@ Indicates whether proxy protocol version 2 is enabled. By default, proxy protoco -Indicates whether sticky sessions are enabled. The value is `true` or `false`. The default is `false`. +Indicates whether sticky sessions are enabled. The value is `true` or `false`. The default is `false`. This attribute does not apply to QUIC traffic.