AWS Global Infrastructure
AWS Global Infrastructure
Why make a global applications?
- A global application is an application deployed in multiple geographies.
- On AWS: this could be Regions and / or Edge Locations
- Decreased Latency
- Latency is the time it takes for a network packet to reach a server
- It takes time for a packet from Asia to reach the US
- Deploy your applications closer to your users to decrease latency, better experience
- Disaster Recovery (DR)
- If as AWS region goes down (earthquake, storms, power shutdown, politics)...
- You can fall-over to another region and have your application still working
- A DR plan is important to increase the availability of your application
- Attack protection: ditribution global infrastructure is harder to attack
Global Applications in AWS
- Global DNS: Route 53
- Great to route users to the closest deployment with least latency
- Great for disaster recovery strategies
- Global Content Delivery Network (CDN) : CloudFront
- Replicate part of your application to AWS Edge Locations - decrease latency
- Cache common requests - improved user experience and decreased latency
- S3 Transfer Acceleration
- Acceleration global uploads & downloads into Amazon S3
- AWS Global Accelerator:
- Improve global application availability and performance using the AWS global network
- Great to route users to the closest deployment with least latency
- Great for disaster recovery strategies
- Replicate part of your application to AWS Edge Locations - decrease latency
- Cache common requests - improved user experience and decreased latency
- Acceleration global uploads & downloads into Amazon S3
- Improve global application availability and performance using the AWS global network
Amazon Route 53 Overview
- Route 53 is a Manged DNS (Domain Name System)
- DNS is a collection of rules and records which helps clients understand how to reach a server through URLs.
- In AWS, the most common records are:
- www.google.com => 12.34.56.78 == A record (IPv4)
- www.google.com => 200 l:0db8:85a3:0000:0000:8a2e:0370:7334 == AAAA IPv6
- search.google.com => www.google.com => CNAME: hostname to hostname
- example.com => AWS resource == Alias (ex: ELB, CloudFront, S3 RDS, etc...)
There are four Policies rules.
- Simple Routing Policy
- Weighted Routing Policy
- Latency Routing Policy
- Failover Routing Policy
- Content Delivery Network (CDN)
- Improves read performance, content is cached at the edge
- Improves users experience
- Hundreds of Points of Presence globally (edge locations, caches)
- DDoS protection (become worldwide), integration with Shield, AWS Web Application Firewall.
CloudFront - Origins
- S3 Bucket
- For distributing files and caching them at the edge
- For uploading files to S3 through CloudFront
- Secured using Origin Access Control (OAC)
- VPC Origin
- For applications hosted in VPC private subnets
- Private Application Load Balancer / Nerwork Load Balancer / EC2 Instance
- Custom Origin (HTTP)
- S3 website ( must first enable the bucket as a static S3 website)
- Any public HTTP backend you want (Example: Public ALB)
CloudFront vs S3 Cross Region Replication
- CloudFront:
- Global Edge network
- Files are cached for a TTL (maybe a day)
- Great for static content that must be available everywhere
- Global Edge network
- Files are cached for a TTL (maybe a day)
- Great for static content that must be available everywhere
- S3 Cross Region Replication:
- Must be setup for each region you want replication to happen
- Files are updated in near real-time
- Read only
- Great for dynamic content that needs to be available at low-latency in few regions
- Must be setup for each region you want replication to happen
- Files are updated in near real-time
- Read only
- Great for dynamic content that needs to be available at low-latency in few regions
S3 Transfer Acceleration
Increase transfer speed by transferring file to an AWS edge location which will forward the data to S3 bucket in the target region.
- Improve global application availability and performace using the AWS global network
- Leverage the AWS internal network to optimize the route to your application ( 60% improvement)
- 2 Anycast IP are created for your application and traffic is sent through Edge Location
- The Edge locations send the traffic to your application
- They both use the AWS global network and its edge locations aroung the world
- Both services integrate with AWS Shield for DDoS protection
- CloudFront - Content Delivery Network
- Improves performance for your cacheable content ( such as images and videos )
- Content is served at the edge
- Global Accelerator
- No caching, proxying packets at the edge to applications running in one or more AWS Regions
- Improves performance for a wide range of applications over TCP or UDP
- Good for HTTP use cases that require static IP addresses
- Good for HTTP use cases that required deterministic, fast regional failover
AWS Outposts
- Hybrid Cloud: businesses that keep an on-premises infrastructure alongside a cloud infrastructure
- Therefore, two ways of dealing with IT systems:
- One for the AWS cloud ( using the AWS console, CLI and AWS APIs)
- One for their on-premises infrastructure
- AWS Outposts are "server racks" that offers the same AWS infrastructure, services, APIs & tools to build your own applications on-premises just as in the cloud
- AWS will setup and manage "Outposts Racks" within your on-premises infrastructure and you can start leveraging AWS services on-premises
- You are responsible for the Outposts Rack physical security
- Low-latency access to on-premises systems
- Local data processing
- Data residency
- Easier migration from on-premises to the cloud
- Fully managed service
Some services that work on Outposts:
- EC2
- EBS
- S3
- EKS
- ECS
- RDS
- EMR
AWS Wavelength
- Wavelength Zones are infrastructure deployments embedded within the telecommunications provider's datacenters at the edge of the 5G networks
- Brings AWS services to the edge of the 5G networks
- Example: EC2, EBS, VPC...
- Ultra-low latency applications through 5G networks
- Traffic doesn't leave the Communication Service Provider's (CSP) network
- High-bandwidth and secure connection to the parent AWS Region
- No additional charges or service agreements
- Use cases: Smart Cities, ML-assisted diagnostics, Connected Vehicles, Interactive Live Video Streams, AR/VR, Real-time Gaming, ....
AWS Local Zones
- Places AWS compute, storage, database and other selected AWS services closer to end users to run latency-sensitive applications
- Extend your VPC to more locations - "Extension of an AWS Region"
- Compatible with EC2, RDS, ECS, EBS, ElastiCache, Direct Connect ...
- Example:
- AWS Region: N.Virginia (us-east-1)
- AWS Local Zones: Boston, Chicago, Dallas, Houston, Miami, ....
Global Applications Architecture
Global Applications in AWS - Summary
- Global DNS: Route 53
- Great to route users to the closest deployment with least latency
- Great for disaster recovery strategies
- Global Content Delivery Network (CDN): CloudFront
- Replicate part of your application to AWS Edge Locations - decrease latency
- Cache common requests - improved user experienc and decreased latency
- S3 Transfer Acceleration
- Acceleration global uploads & downloads into Amazon S3
- AWS Global Accelerator
- Improve global application availability and performance using the AWS global network
- AWS Outposts
- Deploy Outposts Racks in your own Data Centers to extend AWS Services
- AWS Wavelength
- Brings AWS services to the edge of the 5G networks
- Ultra-low latency applications
- AWS Local Zones
- Bring AWS resources (compute, database, storage, ...) closer to your users
- Good for latency-sensitive applicatons











Comments
Post a Comment