Securely Access RDS Without a Bastion Host Using HAProxy on EKS
Briefly

The article discusses the use of HAProxy as a lightweight and secure proxy for accessing Amazon RDS instances from within an Amazon EKS cluster, eliminating the need for a Bastion host. This setup allows for secure connections to multiple RDS databases (PostgreSQL and MySQL) using simple kubectl port-forward commands, which streamlines development and testing. The article provides necessary prerequisites, including access to an EKS cluster and knowledge of Kubernetes. Detailed configuration of HAProxy within the cluster is also outlined to facilitate seamless access to private subnet RDS instances.
In the traditional AWS setup, accessing an RDS instance in a private subnet usually requires a Bastion host, adding complexity. Skip the Bastion host with HAProxy for secure access.
Using HAProxy within an Amazon EKS cluster allows developers to connect to RDS instances securely and simply via kubectl port-forward, enhancing both convenience and security.
Read at Medium
[
|
]