AWS F5 with Ports redirect
Summary
For this scenario we will use an AWS F5 from Marketplace.
Our instance is a t2.medium with:
two private ips: 10.2.3.169 (configured to be the IP to manage F5 ) and 10.2.3.118 (configured to be the IP to allow public traffic trough an Elastic IP, in our scenario will be 18.198.222.242).
security group rules:
allow from intern: 9444
allow from extern: 443, 8544, 8944, 9987
Domains and ports:
  dev9int.verdiumid-dev.com (internal IP, defined in internal DNS)
                -> 9444 - websecadmin
  dev9.veridiumid-dev.com (external IP, defined in AWS DNS)
               -> 443 bops
                -> 8544 dmz
                -> 8944 shibboleth/idp
                -> 9987 ssp
F5 (internal IP)
→ 8443
Security group rules for F5 instance
Protocol  | Port  | Source  | 
|---|---|---|
TCP  | 443  | 0.0.0.0/0  | 
TCP  | 8544  | 0.0.0.0/0  | 
TCP  | 8944  | 0.0.0.0/0  | 
TCP  | 9987  | 0.0.0.0/0  | 
TCP  | 9444  | OUR_INTERN_NETWORK  | 
TCP  | 22  | OUR_INTERN_NETWORK  | 
TCP  | 8443  | OUR_INTERN_NETWORK  | 
TCP  | 9444  | WEBAPP_INTERN_NETWORK  | 
Security group rules for Webapp instance
Protocol  | Port  | Source  | 
|---|---|---|
TCP  | 443  | 10.2.3.118 / 10.2.3.169 (F5 ips)  | 
TCP  | 8544  | 10.2.3.118 / 10.2.3.169 (F5 ips)  | 
TCP  | 8944  | 10.2.3.118 / 10.2.3.169 (F5 ips)  | 
TCP  | 9987  | 10.2.3.118 / 10.2.3.169 (F5 ips)  | 
TCP  | 9444  | 10.2.3.118 / 10.2.3.169 (F5 ips)  | 
TCP  | 22  | OUR_INTERN_NETWORK  |