Question

Difficulty: MediumHigh-Performing and Scalable Network Architectures

A gaming company hosts a real-time multiplayer application on Amazon EC2 instances in a private subnet. The application uses a custom TCP-based protocol. The client applications are deployed globally, and several corporate clients require a pair of static IP addresses to configure their outbound firewall rules. The network architecture must support high throughput, minimize latency and jitter, and route traffic efficiently from global clients to the private backend. Which combination of services and configurations should a solutions architect use to meet these requirements? (Select TWO.)

  1. Create an AWS Global Accelerator accelerator and register a public Network Load Balancer as an endpoint.Answer
  2. Deploy a public Network Load Balancer in the AWS Region and register the private EC2 instances as targets.Answer
  3. C
    Deploy an Application Load Balancer and configure Amazon Route 53 with latency-based routing policies pointing to the load balancer.
  4. D
    Deploy a public Network Load Balancer and configure stateful Network ACLs on the public subnets to whitelist the corporate clients' IP addresses.
  5. E
    Establish a single AWS Site-to-Site VPN connection between the clients' networks and the VPC to handle high-throughput traffic up to 10 Gbps10\text{ Gbps}.

Answer

Deploy a public Network Load Balancer in the AWS Region, register the private EC2 instances as targets, and create an AWS Global Accelerator accelerator registering the Network Load Balancer as an endpoint.
To meet the requirements, the solutions architect should deploy a public Network Load Balancer (NLB) and an AWS Global Accelerator. An NLB handles high-throughput, low-latency TCP traffic and can route requests directly to EC2 instances in private subnets. AWS Global Accelerator provides two static Anycast IP addresses for the clients to whitelist in their firewalls, and it routes traffic over the high-speed AWS global network to the NLB, minimizing latency and jitter.

Step-by-Step Solution

1
Identify the protocol and throughput requirements.
The application uses a custom TCP-based protocol requiring high throughput.
This rules out Application Load Balancers (ALB) and CloudFront as they do not support custom TCP traffic (only HTTP/HTTPS/WebSockets).
2
Identify the client IP and routing requirements.
Global clients need static IP addresses to whitelist, and latency/jitter must be minimized.
AWS Global Accelerator provides two static Anycast IP addresses and routes TCP traffic over the AWS global backbone network to the nearest endpoint, minimizing latency and jitter.
3
Combine the load balancer and routing services.
Deploy a public Network Load Balancer (NLB) in the AWS Region to target the private EC2 instances, and register the NLB as an endpoint for AWS Global Accelerator.
This ensures high-throughput TCP routing to private backend instances while providing static entry IPs and low latency.

Key Concept

AWS Global Accelerator routes TCP/UDP traffic over the AWS global network to endpoints like Network Load Balancers, providing static IP addresses and low-latency performance.
Rate this question