Route 53 Flashcards
Network Load Balancers
Network Load Balancers operate @ layer 4
Use when you need extreme performance
Other use cases are where you need protocols not supported by the App Load Balancer
Network Load Balancers can decrypt traffic, but you will need to install the cert on the load balancer
Classic Load Balancer
504 error means the gateway has timed out
This means the app is not responding w/in the idle timeout
Pull an end users IPv4 address look for the X-forwarded-for header good for getting gen location
Application Load Balancer: Listeners
Listeners: Check for connection requests from clients. using the protocol & port you configure (either port 80 or 443)
Application Load Balancer: Rules
Determine how the load balancer routes requests to its registered targets. Each rule consists of a priority, one or more actions, and one or more conditions
Application Load Balancers: Target Groups
Each target group routes requests to one or more registered targets, such as EC2 instances, using the protocol & port # you specify
Application Load Balancer: Limitations
App Load Balancers only support HTTP & HTTPS
Application Load Balancer: HTTPS
To use an HTTPS listener you must deploy @ least one SSL/TLS server cert on your load balancer
The load balancer uses a server cert to terminate the front end connection & then decrypt the requests from clients before sending them to targets
Load Balancer Types
- Application Load Balancer (Layer 7)
- Network Load Balancer (Layer 4)
- Classic Load Balancer (Layer 4/7)
Load Balancer Health Checks
You use Health Checks to route your traffic to instances or targets that are healthy
Sticky Sessions
Enable your users to stick to the same EC2 instance. Can be useful if you’re storing info locally to the instance
You may see a scenario based question where you remove an EC2 instance from a pool, but the load balancer continues to direct traffic to that EC2 instance
To fix disable sticky sessions
Application Load Balancers also have sticks sessions but that traffic will be sent @ the target group level
Deregistration Delay / Connection Draining
Enable Deregistration Delay
Keeps existing connections open if an EC2 instance becomes unhealthy
Disable Deregistration Delay
Do this if you want your load balancer to immediately close connections to the instances that are de-registering or have become unhealthy