A SysOps administrator needs to configure active-passive DNS failover for a public-facing API. The primary endpoint is hosted in an on-premises datacenter, and the secondary disaster recovery endpoint is hosted on an Amazon EC2 instance in AWS. If the on-premises endpoint becomes unreachable, Route 53 must automatically redirect traffic to the EC2 instance. How should the administrator configure Amazon Route 53 to meet these requirements?
- Configure a Route 53 health check for the on-premises endpoint. Create a primary record with a Failover routing policy pointing to the on-premises IP address and associate it with the health check. Create a secondary record with a Failover routing policy pointing to the EC2 instance IP address.Answer
- BCreate weighted routing records for both endpoints, setting the weight of the primary record to 100 and the secondary record to 0, and associate a Route 53 health check with both records.
- CConfigure a CloudWatch alarm using standard monitoring metrics to check on-premises health, and use a Simple routing record that automatically redirects traffic to the secondary IP when the alarm triggers.
- DCreate a primary record with a Failover routing policy pointing to the on-premises IP, and configure the secondary record to point directly to an Amazon RDS Read Replica endpoint to handle application traffic during a failover.
Answer
Configure a Route 53 health check for the on-premises endpoint. Create a primary record with a Failover routing policy pointing to the on-premises IP address and associate it with the health check. Create a secondary record with a Failover routing policy pointing to the EC2 instance IP address.
The correct configuration is to configure a Route 53 health check for the on-premises endpoint, then create a primary record with a Failover routing policy pointing to the on-premises IP address and associate it with the health check, and finally create a secondary record with a Failover routing policy pointing to the EC2 instance IP address. This properly defines an active-passive failover configuration where DNS queries resolve to the primary endpoint until the associated health check fails, at which point Route 53 begins responding with the secondary endpoint IP address.
Step-by-Step Solution
Key Concept
Route 53 active-passive DNS failover requires a primary record with a health check and a secondary record, both configured with the Failover routing policy.