AWS Elastic Load Balancing Backend SSL to Gorouter

Products

• VMware Tanzu Application Service for VMs

Issue/Introduction

Symptoms:

After configuring AWS elastic load balancer to forward SSL traffic to Gorouter, the HTTP requests cannot pass into Gorouter successfully.

Gorouters report error logs as tls: no cipher suite supported by both client and server.

It turned out that the default Gorouter cipher suites are not matching elastic load balancer backend cipher suites.

Environment

Resolution

1. Check your configurations of Gorouter cipher suites. Go to PCF 1.12 Elastic Runtime Tile, Networking section.

2. Add AWS ELB supported cipher with TLS_RSA_WITH_AES_256_GCM_SHA384

3. Save and click Apply Changes.