Core concept

ALB: path/host routing. Cognito auth. Lambda targets. WAF integration. Layer 7.

Advertisement

How it works

NLB: layer 4. Millions RPS. Static IP + PrivateLink support. Preserve client IP.

Advertisement

Trade-offs + gotchas

GWLB: insert firewalls/IDPS transparently into VPC traffic. Third-party appliances.