Global Infrastructure Flashcards
1
Q
What makes a global application?
A
- Decreased latency (geographic locations)
- Disaster recovery
- Attack protection (hard to attack globally)
2
Q
What is the AWS global infrastructure?
A
- Regions
- AZ’s
- Edge locations
3
Q
Which AWS services make up global applications?
A
- Route 53 DNS
- Cloudfront content delivery
- S3 Transfer Acceleration
- AWS Global Accelerator
4
Q
Features of Route 53?
A
- Managed DNS / Domain Registration
- Routing policies - associate multiple ip’s with domain name
- Shield for DDOS protection
- Simple Routing (no health check)
- Weighted Routing (assign weight, health check)
- Latency Routing (route to closest, health check)
- Failover Routing (re-route if down, health check)
- NOTE: a domain name is required so have to buy one from Amazon)
5
Q
Features of Cloudfront ?
A
- Improved read performance for static content (html, jpg, css)
- content cached at edge locations (using internal AWS network) with lowest latency
- DDOS Protection (uses Shield and AWS Web Application Firewall)
6
Q
How does Cloudfront work?
A
- Caches S3, S3 HTTP, and any HTTP backend
- Request is checked at Edge location. If cached, immediately server. Else Cloudfront gathers data requested, then caches and serves
- Takes 24 hours to propogate: HTTP 307 error until
7
Q
What is S3 Transfer Acceleration?
A
- Increase file being transferred/uploaded to S3 Bucket by using private AWS network
- Data 1st loaded to Edge location on public network, then use AWS network to move to final location. Faster
8
Q
What is AWS Global Accelerator ?
A
- Improve global application availability and performance by using AWS global network
- 2 Anycast IP’s (static) are created for application. Traffic for application is sent on AWS to Edge location.
- So app is accessed ‘locally’ while data is transferred fast on AWS internal network.
9
Q
Difference between Cloudfront and Global Accelerator?
A
- Cloudfront caches content, GA does not
- Both use Shield for DDoS protection
- GA is for applications, CF for content
10
Q
What is AWS Outposts?
A
- AWS installed on-premise servers (racks) that contain AWS cloud services
- Now you are responsible for physical security
- Easier migration to AWS cloud