How can I open security group permissions from my Elastic Load Balancer to my app servers?

Background

When creating a security group and assigning it to an app server, you can specify a group rule in the security group to allow ELB connections as needed. This article aims to explain how to accomplish this using Rightscale.

Answer

By default, Amazon places ELBs into the 'amazon-elb-sg' security group owned by an 'amazon-elb' user.

Using security group nesting, we can open an ingress rule in a security group by using the "amazon-elb-sg" group name and using the owner "amazon-elb" instead of an owner account ID.

Below is a screenshot outlining this example and displaying how the rule is configured and how it should look after it is configured:

Still have further questions?

Call us at (866) 787-2253, email us at support@rightscale.com or send us a support ticket using the Support -> Email link within the dashboard and we'll be happy to assist.