Skip to content

Latest commit

 

History

History

nacl-outbound-ephemeral-ports

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 

👮 AWS Security - Why add Ephemeral ports to NACL

Recently, I was asked why do we need to add ephemeral ports on NACL?.

why-add-ephemeral-ports-on-nacl

Follow this article in Udemy

Let us try to understand that with a simple scenario. When you want to visit a webpage you use a browser type in the url, in the background, Your browser(client) sends a request to the website(web-server).

The client that initiates the request chooses the ephemeral port range on which it wants to receive the payload it requested for. The range varies depending on the client's operating system. So, for a web server to work properly, we need to configure appropriate ephemerals ports on the web server.

Lab Setup

In this repo, I have included a cloudformation template for a working web server. Go ahead and attach the public subnets to the custom subnet web broken nacl. Figure out what it is not working when attached to web broken nacl and why it works when attached to the default nacl. Happy Learning.

📌 Who is using this

This Udemy course uses this repository extensively to teach advanced AWS Cloud Security to new developers, Solution Architects & Ops Engineers in AWS.

💡 Help/Suggestions or 🐛 Bugs

Thank you for your interest in contributing to our project. Whether it's a bug report, new feature, correction, or additional documentation or solutions, we greatly value feedback and contributions from our community. Start here

👋 Buy me a coffee

Buy me a coffee ☕.

📚 References

  1. Custom Network ACLs & Ephemeral Ports
  2. Host a website on an EC2 instance

🏷️ Metadata

Level: 100