Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CNAME resolution breaks authentication when RDS instance has a public IP address #17

Open
atyndall opened this issue Jul 29, 2022 · 0 comments

Comments

@atyndall
Copy link

atyndall commented Jul 29, 2022

When an RDS instance has a public IP, Amazon represents it as a CNAME to the EC2 instance's public IP address. This breaks authentication, as the hostname is "resolved" to "ec2-99-99-99-99.us-west-2.compute.amazonaws.com" in my below example, instead of staying as "mydatabase.something.us-west-2.rds.amazonaws.com".

➜  ~ dig mydatabase.something.us-west-2.rds.amazonaws.com

;; ANSWER SECTION:
mydatabase.something.us-west-2.rds.amazonaws.com. 5 IN CNAME ec2-99-99-99-99.us-west-2.compute.amazonaws.com.
ec2-99-99-99-99.us-west-2.compute.amazonaws.com. 21600 IN A 99.99.99.99

An option to disable the CNAME resolution, or an improvement to its algorithm would be helpful.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant