current I have an IoT infrastructure composed from Cloud part:

• backend server
• SSH server
• Apache proxy

and customer part:

• Agent

where there is implemented a reverse tunnel to allow Remote desktop over HTTPS. The only port allowed for the communication between Agent and backend is HTTPS 443.

The reverse tunnel is made by SSH command through SSH server over HTTPS by using CONNECT method.

I want to take this architecture in AWS Cloud and my question is:

Can AWS Application Load Balancer replaces Apache proxy to maintain the same reverse tunnel feature as now ?