Seven patterns to increase application availability
summary
Seven concrete patterns using CloudFront, Route 53, Global Accelerator, WAF and Shield: shuffle sharding (2,048 virtual nameservers, 730 billion unique shards) to isolate tenants and Route 53’s 100% data‑plane SLA that stayed functional during the us‑east‑1 incident; origin failover via CloudFront origin groups and Global Accelerator health checks (failover ~30s); edge compute like Lambda@Edge waiting room and CloudFront Functions for sub‑ms routing and throttling; Shield Advanced auto‑generates WAF rules, WAF rate limits/CAPTCHA/ATP for bot and L7 DDoS protection; ECMP + gossip in POPs yields ~10x downtime reduction.
AI-written summary · about
chapters (33)
- 0:00Intro
- 1:39What does availability depend on?
- 2:30AWS global footprint
- 3:10Overview of AWS edge networking services
- 3:25Edge networking services under the hood
- 4:45Reducing the blast radius of code changes
- 5:59Problem with homogeneous platforms
- 7:09The solution: Jittering the file system
- 8:26Challenge with horizontally scalable systems
- 8:54Workload isolation using shuffle sharding
- 10:25Shuffle sharding in Route 53
- 11:56Route 53 architecture
- 12:18Load balancing inside a CloudFront POP
- 14:44A Origin failover with Route 53
- 15:26Origin failover with CloudFront
- 16:07Origin failover with Global Accelerator
- 16:27Other application recovery use cases
- 16:55Amazon Route 53 Application Recovery Controller
- 17:32Amazon Route 53 ARC-Readiness checks
- 20:59Static stability of CloudFront
- 22:02Case study: Dynamic origin routing
- 23:26Serverless compute environments on AWS
- 24:48Waiting room to protect application availability
- 26:30Waiting room with a FIFO
- 27:07Securing your web application from the Internet
- 28:24Managed prefix lists for AWS Origins
- 29:12AWS Shield Advanced
- 31:31Rate limits feature in AWS WAF
- 34:05Security dashboard with AWS services
- 34:43The rise in bot traffic
- 36:00Anatomy of a bad bot
- 37:39Active challenges
- 39:51Recap on building HA systems
related talks
30mOptimizing the end user experience & security with AWS edge networking
54mAWS Certified Solution Architect an Overview - Part 1
51mProtect your internet-facing web applications hosted on AWS
33mNetwork and application protection on AWS
35mBetter User Experience and Security with Edge Services
29mBuild resilient and secure global cloud networks
35mComprehensive protection for Infrastructure and Web Apps
41mAutoScaling Web Application Security in the Cloud