title: Healthcheck for NetworkLoadBalancer with UDP ECS service
body: <p>I'm trying to deploy an ECS service that uses only a UDP port.  Support has been added for UDP load-balancing via NetworkLoadBalancers, so I've deployed my service allowing dynamic host port assignment for my tasks and setup the NLB with an appropriate listener and target group.</p>
  
  <p>The problem I'm running into is that healthchecks are apparently <em>mandatory</em> for the NLB, and must be TCP based.  For the healthcheck port, you can leave the default "target" port (which works fine for dynamic host port assignment) or you can specify a port.  What I <em>can't</em> do is have a different port exposed for TCP than my load balancer target UDP port.  I could have my container listen to both UDP for production and TCP for healthchecks on the same port, but the task definition seems to disallow that even though Docker supports it fine.</p>
  
  <p>This would seem to make UDP NLB's useless for ECS services, unless there's something I'm missing?  The only alternative I've come up with is to use statically configured host ports so I can expose a second port for TCP on a controlled host port and target that for the NLB healthcheck.  The problem with that is we've now lost all of the scalability benefit of ECS by not being able to run more than one task on an instance.</p>