Securely Access RDS Without a Bastion Host Using HAProxy on EKS
Briefly

The article discusses a method to access Amazon RDS instances located in private subnets without a Bastion host by implementing HAProxy in an Amazon EKS cluster. This configuration allows developers to connect securely to multiple PostgreSQL and MySQL instances using kubectl port-forward commands, simplifying the workflow for development and testing while maintaining security. The setup requires an existing EKS configuration, kubectl, and an RDS instance and can benefit from a GitOps approach for deployment, effectively streamlining database access across the Kubernetes environment.
In traditional AWS setups, accessing an Amazon RDS instance in a private subnet often involves setting up a Bastion host, but this article explores a way to skip that by using HAProxy.
By utilizing HAProxy as a lightweight proxy within an Amazon EKS cluster, developers can securely access RDS instances without the complexities of managing a Bastion host.
Read at Medium
[
|
]