Content Delivery Flashcards
CDN
Content Delivery Network is a global network of interconnected servers that ensures your website’s content reaches users quickly.
If one server is down or overwhelmed, the CDN automatically reroutes requests to the next closest server.
This ensures your website remains available and performs consistently, regardless of traffic spikes or server issues.
Amazon CloudFront
It is a Content Delivery Network (CDN)
Charges for data transfers, but the first terabyte is free
caching your content in multiple data centers, known as edge locations, all over the world.
It integrates with AWS Shield for DDoS protection, and AWS Web Application Firewall, or WAF, to safeguard your site from common web exploits.
Works to protect the transfer of sensitive data, such as credit card information
Amazon Global Accelerator
Uses edge locations to find an optimal pathway to the nearest regional endpoint.
Some benefits of AWS Global Accelerator are improved performance.
Propels user traffic through Amazon’s congestion-free global network.
Global Accelerator provides two global static public IPs
that act as a fixed entry point to your application endpoints.
Simplifies traffic management across multiple regions acting as a single entry point, and thus reducing the complexity of handling global network traffic.
Includes DDOs protection
What are VPCs and Public Subnets
A Virtual Private Cloud (VPC) is a logically isolated section where you can launch AWS resources in a virtual network that you define. Public Subnets are accessible from the internet, while private subnets are used for internal resources like databases.
What are Route Tables
Route tables control the flow of traffic within the VPC
Internet Gateway
An Internet Gateway (IGW) enables communication between instances in your Virtual Private Cloud (VPC) and the internet. It is a horizontally scaled, redundant, and highly available VPC component that allows traffic to flow between your VPC and the internet.
What are NACLs
NACLs or network access control lists operate at the subnet level, they are in charge of traffic in the subnets
They’re stateless and they offer an additional layer of security.
“Stateless” refers to a type of network device or security mechanism that treats each packet of data independently, without retaining any information about previous packets.
Route 53
Amazon DNS - Domain Name System. It also provides domain name registration and health checking web services.
Translating domain names into IP addresses.
What Route 53 can do?
It uses a variety of routing methods, including geolocation routing, latency-based routing, and weighted round-robin routing, which allows you to send a small portion of traffic
to a server.
It automatically routes traffic away from failed or unhealthy endpoints to ensure continued availability and performance.
Route 53 can distribute incoming application traffic
across multiple targets such as EC2 instances,
containers, and IP addresses.
Site-to-site VPN
- Creates a secure connection between your data center or branch office and your AWS environment.
- Extends your network to the AWS Cloud as if it were part of your own data center.
AWS client VPN
- Managed client-based VPN service.
- Provides secure access to AWS resources or private networks from any location.
- Ideal for remote users, such as employees connecting from outside the office.
AWS Direct Connect
It is like a private connection to AWS without using the internet.
1. High-speed data transfer
- Provides dedicated network capacity.
- Significantly boosts data transfer speed.
- Ideal for large-scale data migrations, disaster recovery, or real-time data feeds.
2. Reduced bandwidth costs
- Bypasses the public internet.
- Lowers overall network costs for heavy data transfer.
3. Reliable and private connection
- Offers a stable and secure path.
- Minimizes risks associated with internet connectivity issues like latency and potential threats.
- Enhances security for sensitive data.
When to use AWS Direct Connect?
Large-scale data transfer requirements.
Consistent network performance is crucial.
Enhanced security for sensitive data.
When to use AWS VPN?
- Flexible remote access is required.
- Cost-effective solution for smaller data loads.
- Quick and easy setup for temporary or urgent requirements.
Which feature of Amazon Route 53 helps to manage traffic for your application based on various criteria, such as geographic location?
Route 53 traffic flow is a feature of Amazon Route 53 that allows you to manage how traffic is routed to your application.
Which scenario best utilizes AWS Global Accelerator?
To optimize global application performance by routing user traffic through AWS’s global network
What is the primary role of an internet gateway in an Amazon VPC?
To enable communication between instances in the VPC and the internet
What is the primary function of a CDN like Amazon CloudFront?
The primary function of a CDN like Amazon CloudFront is to deliver content globally with low latency and high transfer speeds.
What is the main role of DNS services like Amazon Route 53?
DNS services like Amazon Route 53 route end users to applications running on AWS by resolving domain names to IP addresses.
What is a primary purpose of Amazon Virtual Private Cloud (VPC)?
Amazon VPC allows users to create a logically isolated section of the AWS cloud for deploying AWS resources.
Which feature is a key aspect of Amazon Route 53?
A key aspect of Amazon Route 53 is managing DNS records and routing internet traffic to the appropriate location.
When is AWS Direct Connect the preferred choice over VPN?
When a high-capacity, dedicated data transfer path is needed
What is the primary function of security groups in an Amazon VPC?
Security groups act as virtual firewalls for EC2 instances, controlling inbound and outbound traffic.
Which feature of Amazon Route 53 helps to manage traffic for your application based on various criteria, such as geographic location?
Traffic flow