recently I have tried to redeploy old Drone 0.5 environment to Drone 0.8 on AWS ECS and faced some difficulties dealing with multiple ports for a drone server container. In previous deployment, all communications gone through one exposed port. With recent switch to GRPC running on a separate port, ECS limitations showed up. AWS ECS does not allow to create multiple target groups per service.
Possible solution is to use awsvpc network mode with NLB. Such a way, multiple ports for a container are reachable by forwarding to the same IP address assigned for a container. Unfortunately, I could not terminate HTTPS on NLB (does not recognize high level protocol HTTP/HTTPS).
If I combine ALB(with HTTPS) --> container with reverse-proxy --> NLB(two ports 8000, 9000) <-- Docker Agent container, would it be a proper answer to ECS limitation?
Please share your thought if anyone hit similar issues.
Thanks in advance