Networking & Content Delivery

Category: *Post Types

Deployment models for AWS Network Firewall with VPC routing enhancements

Introduction Amazon Virtual Private Cloud (VPC) is a logically isolated virtual network. It has inbuilt network security controls and implicit routing between VPC subnets by design. Network security controls such as security groups (SGs) and network access control lists (ACLs) provide you with options to control network traffic. However these controls operate at network and transport […]

Scale traffic using multiple Interface Endpoints

Introduction: AWS PrivateLink is a networking service that is used to connect to AWS services, your internal services, and third-party Software as a Service (SaaS) services–all over the private, secure, and scalable AWS network. AWS PrivateLink has two sides to it: Service provider: Responsible for offering the service. The service provider creates an Amazon Virtual […]

Celebrate 15 Years of Amazon EC2 with Twitch Livestream Events

When Amazon Elastic Compute Cloud (EC2) launched in 2006, the world looked very different. Cellphones weren’t smart, and no one had even heard of an App Store. Fast forward 15 years, and the world has become more digitized with many companies building their success by running secure, reliable, and scalable workloads in the cloud. Amazon […]

Analyze VPC Flow Logs with point-and-click Amazon Athena integration

Analyzing your VPC Flow Logs using Athena is now easier than ever! The recently introduced VPC Flow Logs integration with Amazon Athena helps you get started with extracting meaningful insights from VPC Flow Logs in just a few clicks. In this blog post, we will walk you through how you can use this recently announced […]

Resolve DNS names of Network Load Balancer nodes to limit cross-Zone traffic

Introduction Network Load Balancer (NLB), part of the Elastic Load Balancing Family, is the flagship Layer 4 load balancer for AWS. It offers elastic capacity, high performance, and integration with many other AWS services (such as Amazon EC2 Auto Scaling). NLB is designed to handle millions of requests per second while maintaining ultra-low latency, improving […]

Best practices for deploying Gateway Load Balancer

Updated 03/04/2023: The following updates were made to this blog: Expanded the behavior of idle timeout to address TCP flow and UDP packets. Referenced price reduction announcement for inter-az charges Referenced enhancement made in target failover of the existing flows in GWLB Introduction At re:Invent 2020, we launched Gateway Load Balancer (GWLB), a service that […]

New APIs and functionality for managing Amazon CloudFront CNAMEs

Today, Amazon CloudFront announced the release of two new APIs, ListConflictingAliases and AssociateAlias. These APIs are useful when you need to locate or move Alternate Domain Names (CNAMEs) when you encounter the CNAMEAlreadyExists error code. In addition, more use cases have been enabled when you are working with wildcard CNAMEs across accounts. Before diving into […]

Using Route 53 Resolver DNS Firewall Logs with CloudWatch Contributor Insights and Anomaly Detection

Introduction The Domain Name System (DNS) is one of the most critical components for almost any network as every service relies on a functional DNS service. Amazon Route 53 Resolver (sometimes referred to as “AmazonProvidedDNS” or the “.2/+2 resolver”) provides a highly available and scalable DNS service that customers have come to rely upon for their recursive DNS […]

Accessing an AWS API Gateway via static IP addresses provided by AWS Global Accelerator

Introduction In this article, I will walk you through the steps to configure Amazon API Gateway in combination with AWS Global Accelerator to present Internet-facing API via static IP addresses to end users. This design addresses the need for static IP safelisting and also provides additional performance benefits to end users by sending user’s traffic […]

Automating service discovery using AWS Transit Gateway Multicast with IGMP

This post will describe how to use multicast and Internet Group Management Protocol (IGMP), two of the newer features of AWS Transit Gateway, to enable applications and services to discover each other automatically when running in Amazon Virtual Private Cloud (Amazon VPC) environments. Service discovery means that a service client, such as a network file […]