Does it make any sense to have a AWS NLB configured with public subnets, but also configure the scheme to be internal?
NLB with public subnet means that it can receive requests from public internet directly.
However, An “internal” NLB is used within a private network and is not accessible from the internet. It has a DNS name that resolves to private IP addresses.
So, if I configure my NLB with
-
public subnet
-
scheme “Internal”
It means that NLB is still accessible from public internet, but hackers cannot use the DNS name of the NLB to access it.
Am I right?