Amazon AWS ELB without public address on servers behind it
<p>I currently have 3 servers sitting behind a ELB on AWS.</p>

<p>Each of these EC2 instance sit in 3 separate availability zones.</p>

<p>I use the ELB for </p>

<ul>
<li><p>SSL Termination</p></li>
<li><p>Distribute Load</p></li>
</ul>

<p>I have already configured a VPN to access the EC2 Instance for SSH access however I cannot get the ELB to work when I remove the public addresses from the EC2 containers...</p>

<p>I assumed that I could have them allow traffic only on port 80 (443 terminated on ELB) from the ELB sec group, which would mean I wouldn't need Ext IPs as ELB connects directly to them?</p>

<p>I assume i would need to also setup NAT for them to be able to externally access?</p>

<p>Are ELBs not within a subnet?</p>

<p>Tried all variations coming to conclusion they need public IPs but just restrict what has access?</p>

<p>Many thanks in advance!</p>