Examkin

Soru

Zorluk: ZorHigh-Performing and Scalable Network Architectures

A financial services company hosts a latency-sensitive market data API on Amazon EC2 instances behind an Application Load Balancer (ALB) in the us-east-1 Region. Customers in London and Tokyo are experiencing connection timeouts and high latency when accessing the API. The client applications require static IP addresses to comply with their strict egress firewall policies. Additionally, the network design must minimize TCP connection establishment latency and bypass the routing inefficiencies of the public internet. Which solution should a solutions architect recommend to optimize the network performance for the global clients?

  1. A
    Configure Amazon Route 53 with latency-based routing policies to resolve the API domain name to the ALB in us-east-1.
  2. B
    Establish an AWS Site-to-Site VPN connection using a single VPN tunnel to route all client traffic over the encrypted tunnel directly to the ALB.
  3. Deploy AWS Global Accelerator to provide static Anycast IP addresses, terminating TCP connections at the edge and routing traffic over the AWS global network to the ALB.Cevap
  4. D
    Deploy an AWS Client VPN gateway and configure stateful Network Access Control Lists (Network ACLs) at the VPC boundary to track and prioritize client TCP sessions.

Cevap

Deploy AWS Global Accelerator to provide static Anycast IP addresses, terminating TCP connections at the edge and routing traffic over the AWS global network to the ALB.
AWS Global Accelerator provides two static Anycast IP addresses that serve as a single entry point for global clients, satisfying the firewall requirements. By terminating TCP connections at the AWS Edge Location closest to the clients, it reduces the Round-Trip Time (RTT) for connection establishment. The traffic is then routed over the private, congestion-free AWS global network to the Application Load Balancer in the us-east-1 Region, bypassing public internet routing inefficiencies.

Adım Adım Çözüm

1
Analyze client requirements: static IP addresses for egress firewalls, reduced TCP connection establishment latency, and bypassing public internet routing inefficiencies.
Identified that DNS-based routing (Route 53) and traditional VPN solutions over the public internet are insufficient.
DNS resolutions do not provide fixed static IPs for client firewalls, and public routing introduces latency fluctuations.
2
Evaluate AWS network optimization options that leverage the private AWS backbone.
Determined that AWS Global Accelerator terminates TCP connections at the edge closest to clients and provides two static Anycast IP addresses.
Anycast IPs address the client firewall constraints, and terminating TCP connections at the edge reduces the Round-Trip Time (RTT) for the handshake.
3
Verify integration with the backend architecture in the target region.
AWS Global Accelerator integrates directly with the Application Load Balancer (ALB) in us-east-1, routing traffic over the AWS private global network.
This provides a highly available, high-performing path that avoids public internet routing fluctuations without requiring backend replication.

Anahtar Kavram

AWS Global Accelerator uses Anycast IP addresses and the AWS global network to optimize latency, TCP connection times, and reliability for global users.
Bu soruyu puanla

Konular

High-Performing and Scalable Network Architectures

Bu konudan daha fazla soru