HA Bastions

Question 1

What are the HA Bastion Exam Tips?

*Very short video but notes a couple things.

Answer 1

There are two different scenarios for high availability with Bastian hosts.

1. Two hosts in two separate availability zones using network load balancer with static, IP addresses and health checks to fail over from one host to another.
   Remember that you can’t use an application load balancer as it’s layer seven. So you’re going to need to use layer four. So that’s why we use a network load balancer.
2. One host and one availability zone behind an auto
   scaling group with health checks and elastic IP address and if this fails, the health check will then fail and the auto scaling group will provision a new EC2 instance in a separate availability zone and you can create a user data script to provision the same elastic IP address to the new host and this is the cheapest option, but it’s not 100% fault tolerant. You are going to have some downtime and that’s going to be the downtime that it
   takes for the health check to fail as well as downtime.
   That’s going to be incurred as you’re provisioning your new Bastion host.