Networking & Content Delivery

Category: Management Tools

Choosing the right health check with Elastic Load Balancing and EC2 Auto Scaling

Customers frequently use Elastic Load Balancing (ELB) load balancers and HAQM EC2 Auto Scaling groups (ASG) to build scalable, resilient workloads. When configured correctly, HAQM ELB health checks help make your workload more resilient to failures in your workload components behind the load balancer. However, you may need to make tradeoffs for handling different failure […]

Monitoring load balancers using HAQM CloudWatch anomaly detection alarms

Load balancers are a critical component in the architecture of distributed software services. AWS Elastic Load Balancing (ELB) provides highly performant automatic distribution for any scale of incoming traffic across many compute targets (HAQM Elastic Compute Cloud (HAQM EC2), HAQM Elastic Container Service (HAQM ECS), AWS Lambda, etc.), while enabling developers to adopt security best practices […]

Monitoring EC2 Connection Tracking utilization using a new network performance metric

In 2020, HAQM Elastic Compute Cloud (HAQM EC2) announced new network performance metrics for EC2 instances made available using ENA driver and HAQM CloudWatch agent. We covered the launch in this post. These network performance metrics give customers visibility into the number of packets queued or dropped when an instance’s networking allowances, such as Network […]

Gain usage insights with HAQM CloudWatch metrics and Contributor Insights for AWS PrivateLink

We recently launched HAQM CloudWatch metrics for AWS PrivateLink. This feature publishes metrics for PrivateLink services and endpoints at 1-minute intervals at no cost to you. You can also use CloudWatch Contributor Insights to visualize usage against your PrivateLink services. This blog summarizes PrivateLink metrics, shows the metrics and filters in HAQM CloudWatch, and provides […]

AWS Cloud WAN and HAQM VPC IPAM with AWS Control Tower

AWS Control Tower offers a straightforward way to set up and govern a multi-account AWS environment, following prescriptive best practices to build a secure landing zone quickly. You can provision tens, if not hundreds, of new AWS accounts at one time using AWS Control Tower. Once you provision accounts, you typically require the deployment of HAQM […]

IP Address Management for AWS Control Tower

For many customers, governing and auditing IP address allocation for at-scale networks is a complex, time-consuming, and potentially error-prone task. This is because application workloads are rapidly migrating to the cloud. Traditionally, network administrators have resorted to using combinations of spreadsheets, home-grown tools, and scripts to track address assignments across multiple accounts, HAQM Virtual Private […]

Expedite your IPv6 adoption with PrivateLink services and endpoints

AWS now supports IPv6 for AWS PrivateLink services and endpoints. PrivateLink support for IPv6 expedites IPv6 adoption by decoupling the service consumer and service provider IP protocol version. Even if a service provider has not started to support IPv6 for all their back-end services, service consumers can use IPv6 within their VPCs to access the […]

How Repsol manages and monitors their AWS network with dashboards, alarms and automation

Large enterprises often deploy workloads on HAQM Web Services (AWS) using multiple accounts. This helps isolate workloads, manage permissions more easily, and simplifies cost allocation. However, managing a multi-account environment can make your network topology more complex and requires additional monitoring and automation. At Repsol, a global multi-energy company present throughout the entire value chain, […]

Running multicast-enabled containers on AWS

Introduction Multicast is a popular IP-based communication mechanism that is actively employed in many industry verticals, including finance, media, telco, transportation, and others. This post describes how to enable multicast in container environments orchestrated by HAQM Elastic Container Service (ECS). Although HAQM ECS is a fully managed container orchestration service, some additional steps must be […]

Signed cookie-based authentication with HAQM CloudFront and AWS Lambda@Edge: Part 2 – Authorization

In this two-part blog series, you will learn how to use email addresses and domain names for user authentication. With this method, you restrict credentials-free user access to a static website. In this second part of the blog series, you will learn how to implement the authorization mechanism. In the previous blog post, you learnt […]