ELB Flashcards
ELB
Elastic Load Balancing
server that forwards traffic to multiple targets
Services integrated (3)
ELB
EC2
ECS
Lambda
ELB
Regional high availability
ELB
Supports using multiple AZs in a region
ELB
Horizontal scaling
ELB
Add EC2 instances to cover additional demand
ELB
availability purpose
ELB
spread load across multiple instances
ELB
public purpose
ELB
provide single point of access (e.g. one DNS entry)
ELB
availability purpose
ELB
seamlessly handle instance failures
ELB
target monitoring purpose
ELB
does health checks on instances
ELB
SSL purpose
ELB
provide SSL termination point
ELB
regional availability purpose
ELB
availability provided across multipl AZ
ELB
security purpose
ELB
separate public traffic from private traffic
ELB
maintenance benefit
ELB
managed and maintained by AWS
ELB
pricing benefit
ELB
costs less than 3rd party LBs
ELB
set up benefit
ELB
low effort needed to set up
ELB
Health check
ELB
allows ELB to know which instances can receive traffic
ELB
how instances are monitored
Health Check
a port and route is frequently checked
Health Check
healthy response
Health Check
200 (OK)
Health Check
ELB
LB security (2)
- Open specific ports from Internet to LB
- Restrict instances to only LB
sticky sessions
ELB
client is directed to same instance during time
ELB
use case
sticky sessions
ensure that client doesn’t lose session data
sticky sessions
draw back
sticky sessions
may case load imbalances
sticky sessions
types of cookies (s)
sticky sessions
- application
- duration
sticky sessions
Application-based cookie (2)
sticky session cookies
- assigned by LB
- named AWSALBAPP
sticky session cookies
custom cookie
sticky session cookies
specified for individual target group
sticky session cookies
duration-based cookie (2)
sticky session cookies
- generated by load balancer
- name is AWSALB
sticky session cookies
cross-zone load balancing
ELB
ELB in one zone can LB to targets in multiple AZs
ELB
default setting for ALB
cross-zone load balancing
enabled
cross-zone load balancing
default setting for NLB and GWLB
cross-zone load balancing
disabled
cross-zone load balancing
SSL cert purpose
ELB
attached to LB to encrypt public traffic
ELB
cert sources (2)
ELB SSL
- ACM (AWS Certificate Manager)
- upload cert you own
ELB SSL
HTTPS listener requirement
ELB SSL
default certificate
ELB SSL
HTTPS listener may have these
ELB SSL
multiple certs for securing multiple domains
ELB SSL
HTTPS listener security policy option
ELB SSL
may enable support for older versions of SSL/TSL
ELB SSL
SNI
ELB SSL
Server Name Indication
allows one web server to load multiple certs
ELB SSL
SNI requirement
SNI
requires client to indicate target domain name in SSL handshake
SNI
SNI response
SNI
use correct cert for domain
SNI
deregistration delay
ELB
gives “in-flight” requests time to complete while instance is deregistereed
ELB
what ALB and NLB do when deregistering instance
deregistration delay
send all new requests to other instances
deregistration delay
time option
deregistration delay
0 (disabled) to 3600 seconds
deregistration delay
time default
deregistration delay
300
deregistration delay
Elastic Load Balancing
server that forwards traffic to multiple targets
ELB
EC2
ECS
Lambda
ELB
Services integrated (3)
ELB
Supports using multiple AZs in a region
ELB
Regional high availability
ELB
Add EC2 instances to cover additional demand
ELB
Horizontal scaling
ELB
spread load across multiple instances
ELB
availability purpose
ELB
provide single point of access (e.g. one DNS entry)
ELB
public purpose
ELB
seamlessly handle instance failures
ELB
availability purpose
ELB
does health checks on instances
ELB
target monitoring purpose
ELB
provide SSL termination point
ELB
SSL purpose
ELB
availability provided across multipl AZ
ELB
regional availability purpose
ELB
separate public traffic from private traffic
ELB
security purpose
ELB
managed and maintained by AWS
ELB
maintenance benefit
ELB
costs less than 3rd party LBs
ELB
pricing benefit
ELB
low effort needed to set up
ELB
set up benefit
ELB
allows ELB to know which instances can receive traffic
ELB
Health check
ELB
a port and route is frequently checked
Health Check
how instances are monitored
Health Check
200 (OK)
Health Check
healthy response
Health Check
- Open specific ports from Internet to LB
- Restrict instances to only LB
ELB
LB security (2)
client is directed to same instance during time
ELB
sticky sessions
ELB
ensure that client doesn’t lose session data
sticky sessions
use case
sticky sessions
may case load imbalances
sticky sessions
draw back
sticky sessions
- application
- duration
sticky sessions
types of cookies (#)
sticky sessions
- assigned by LB
- named AWSALBAPP
sticky session cookies
Application-based cookie (2)
sticky session cookies
specified for individual target group
sticky session cookies
custom cookie
sticky session cookies
- generated by load balancer
- name is AWSALB
sticky session cookies
duration-based cookie (2)
sticky session cookies
ELB in one zone can LB to targets in multiple AZs
ELB
cross-zone load balancing
ELB
enabled
cross-zone load balancing
default setting for ALB
cross-zone load balancing
disabled
cross-zone load balancing
default setting for NLB and GWLB
cross-zone load balancing
attached to LB to encrypt public traffic
ELB
SSL cert location
ELB
- ACM (AWS Certificate Manager)
- upload cert you own
ELB SSL
cert sources (2)
ELB SSL
default certificate
ELB SSL
HTTPS listener requirement
ELB SSL
list of certs for securing multiple domains
ELB SSL
HTTPS listener option
ELB SSL
may enable support for older versions of SSL/TSL
ELB SSL
HTTPS listener security policy option
ELB SSL
Server Name Indication
allows one web server to load multiple certs
ELB SSL
SNI
ELB SSL
requires client to indicate target domain name in SSL handshake
SNI
SNI requirement
SNI
use correct cert for domain
SNI
SNI response
SNI
gives “in-flight” requests time to complete while instance is deregistereed
ELB
deregistration delay
ELB
send all new requests to other instances
deregistration delay
what ALB and NLB do when deregistering instance
deregistration delay
0 (disabled) to 3600 seconds
deregistration delay
time option
deregistration delay
300
deregistration delay
time default
deregistration delay