Load Balancers Flashcards
Elastic Load Balancer (ELB)
automatically distributes incoming application traffic across multiple targets
- can be done across multiple AZs
ELB Health Checks
- all load balancers can be configured with health checks
- sees which instances are healthy or unhealthy
- stops sending requests to unhealthy requests (until they become healthy)
Application Load Balancer
- http & https
- INTELLIGENT
- layer 7
Network Load Balancer
- layer 4 (connection level)
- millions of requests per second
- ultra-low latencies
Classic Load Balancer
- legacy
- http/https
- deprecated
- EOL Aug 2022
ALB - listeners
check for connection requests from clients using the protocol and port you configure
- http: port 80
- https: port 443 w/ SSL certificate
ALB - rules
when conditions are met, then actions are performed
- each listener requires you to provide a default rule
ALB - target groups
route requests to one or more registered targets, such as EC2 instances, using the protocol and port you specify
How does https load balancing work?
- uses port 443
- you must deploy at least one SSL/TLS certificate on your load balancer
- Load balancer uses a server certificate to terminate the front end connection, then decrypts requests from clients before sending them to the targets *
ALB Path-based routing - common exam scenario
Application Load balancer can determine which instance (target) to send user to based on path or url using path patterns
ex:
- send www.myurl.com to us-east-1a
- send www.myurl.com/images to us-east-1b
Network Load Balancers Protocols
TCP, TLS, UDP, TCP_UDP
Network Load Balancer Ports
1 - 65535
How many requests per second can Network Load Balancer handle?
millions
How are listeners different on NLBs than ALBs?
- ALB listeners are intelligent and can check rules
- NLB listeners do not have rules, they are not intelligent, they only forward the request to the target group
Network Load Balancer Encryption
- can use a TLS listener to offload the work of encryption and decryption to your load balancer
- if the listener protocol is TLS, you must deploy exactly 1 SSL certificate on the listener