Home / server / Questions / 1018318
In Process
Pablo
Asked: 2020-05-23 19:35:29 +0800 CST

Is Domain A Record pointing to Elastic IP prone to Attackers?

  • 772

Currently I have working fine ec2 instance

and the DNS A Record is pointed to my elastic ip

Is it risky to point it on elastic ip? or should I point my DNS A record to my load balancer link?

load-balancing amazon-ec2 amazon-web-services amazon-route53

1 Answers

  1. There is no additional risk putting your instance A record into DNS. If you have a load balancer then you should use that CNAME / Alias record instead, but if you don't already have or need a load balancer then you don't need to create a load balancer just for the sake of hiding your A record.

    Personally I use CloudFlare's free plan, so my DNS records point at CloudFlare, which passes traffic on. I whitelist only CloudFlare's IP addresses in my AWS security groups, plus my static home IP.

    Everything on the internet is probed by attackers regularly, and IP addresses are public. You need to secure your server appropriately.

    • 3