Single vpc with Igw, alb, gwlb and Apache servers. Not working

[Johndbabio1]

I followed the directions to a T. Ingress route on Igw, pointing towards the subnets defined in alb. Gwlbe subnet with default route to igw, default route on alb subnet to gwlbe, app subnet with default route to gwlbe. end points defined, gwlb with healthy monitors. I cannot get the traffic to come back. The only way it works is if I remove ingress routes and make the default route on alb subnet to the igw instead gwlbe. This of course defeats the purpose. What am I doing wrong?

[williamshook]

---

@Johndbabio1 wrote:

I followed the directions to a T. Ingress route on Igw, pointing towards the subnets defined in alb. Gwlbe subnet with default route to igw, default route on alb subnet to gwlbe, app subnet with default route to gwlbe. end points defined, gwlb with healthy monitors. I cannot get the traffic to come back. The only way it works is if I remove ingress routes and make the default route on alb subnet to the igw instead gwlbe. This of course defeats the purpose. What am I doing wrong?

---

There may be an issue with your route configurations or security groups. Ensure that your Application Load Balancer (ALB) and Gateway Load Balancer (GWLB) security groups allow inbound and outbound traffic as needed. Additionally, verify that the routing table for the ALB subnet is correctly configured to send traffic to the GWLB and that the health checks are properly set up. Double-check that your ingress rules on the GWLB are allowing the return traffic as well.

[Johndbabio1]

[Johndbabio1]

My ingress route is pointing to 10.116.46.128/27 and 10.116.47.32/27 with next hop gwlbe and gwlbe2.

My alb subnet is a default route to gwlbe and gwlbe2

My gelbe and gwlbe2 networks are default to igw 0.0.0.0/0

My app subnets are default to gwlbe and gwlbe2 and 10.0.0.0/8 to tgw

My monitors for gwlb are healthy firewalls

My alb has healthy monitors to web servers

What am i missing? As soon as i change the alb subnet to default to an igw the web server works. Does this mean there is something wrong with the gwlb and gwlbe's? 

[Johndbabio1]

nacl and sec groups open.