Soru

Zorluk: ZorHigh Availability and Disaster Recovery Design

A global aviation logistics company is designing a high-availability crew bidding and scheduling platform across two AWS Regions: us-east-1 (Primary) and us-west-2 (Secondary). The platform has a Recovery Time Objective (RTO) of 1515 minutes and a Recovery Point Objective (RPO) of 22 minutes. Under normal operations, global flight crews must be routed to the Region with the lowest network latency. In the event of a regional outage, traffic must automatically failover to the healthy Region. The application tier requires outbound internet connectivity to sync with external aviation authorities and must be resilient to Availability Zone (AZ) failures. Which architecture meets these requirements while minimizing operational complexity and cost?

  1. Configure Amazon Route 53 with Latency-based routing policies associated with health checks pointing to Application Load Balancers in both Regions. Deploy the application across multiple Availability Zones in each Region, routing outbound traffic through a NAT Gateway in each Availability Zone. Use Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, executing a managed failover during a regional disaster.Cevap
  2. B
    Configure Amazon Route 53 with Latency-based routing policies associated with health checks pointing to Application Load Balancers in both Regions. Deploy the application across multiple Availability Zones in each Region, routing outbound traffic through a single NAT Gateway deployed in the primary Availability Zone of each Region to minimize costs. Use Amazon Aurora Global Database with the primary cluster in us-east-1 and a secondary cluster in us-west-2, executing a managed failover during a regional disaster.
  3. C
    Configure Amazon Route 53 with Failover routing policies pointing to Application Load Balancers in both Regions. Deploy the application across multiple Availability Zones in each Region, routing outbound traffic through a NAT Gateway in each Availability Zone. Deploy Amazon RDS for PostgreSQL in us-east-1 with daily snapshot sharing to us-west-2, restoring the database in the secondary Region from the latest shared snapshot during a failover.
  4. D
    Configure Amazon Route 53 with Latency-based routing policies associated with health checks pointing to Application Load Balancers in both Regions. Deploy the application across multiple Availability Zones in each Region, routing outbound traffic through a NAT Gateway in each Availability Zone. Deploy Amazon RDS for PostgreSQL in a Multi-AZ configuration in us-east-1, configuring the application tier in us-west-2 to route read-heavy database traffic directly to the RDS standby instance in the secondary Availability Zone to reduce cross-region latency.

Cevap

The correct architecture uses Route 53 Latency-based routing with health checks, a NAT Gateway in each Availability Zone in both Regions, and Amazon Aurora Global Database with managed failover.
The correct architecture meets all constraints: Route 53 Latency-based routing routes users to the lowest-latency Region and automatically redirects traffic to the secondary Region during a disaster when health checks fail. Deploying a NAT Gateway in each Availability Zone avoids single points of failure for outbound traffic. Using Amazon Aurora Global Database satisfies the RPORPO of 22 minutes (since replication lag is typically sub-second) and the RTORTO of 1515 minutes (since a managed failover can be completed within a minute).

Adım Adım Çözüm

1
Analyze the RTO and RPO requirements (RTO=15RTO = 15 minutes, RPO=2RPO = 2 minutes) to determine the database disaster recovery strategy.
Amazon Aurora Global Database is selected because its asynchronous replication lag is typically less than 11 second (satisfying the 22-minute RPO) and its managed failover can be completed in less than 11 minute (satisfying the 1515-minute RTO).
Standard RDS snapshot restoration is too slow and has too high of an RPO, whereas Aurora Global Database replication meets both criteria.
2
Evaluate the routing requirement to send users to the lowest-latency Region under normal operations and automatically failover during an outage.
Configure Amazon Route 53 with Latency-based routing and associate health checks with each record.
Latency-based routing ensures optimal user experience, and the associated health checks allow Route 53 to stop routing traffic to a degraded Region and shift it to the healthy Region automatically.
3
Determine the high-availability design for the application tier's outbound internet connectivity.
Deploy a NAT Gateway in each Availability Zone where the application instances are running.
A single NAT Gateway per Region represents a single point of failure; deploying one per AZ ensures that an AZ outage does not disrupt outbound internet connectivity for the remaining healthy zones.

Anahtar Kavram

Designing multi-Region architectures using Route 53 routing policies, NAT Gateway redundancy, and Amazon Aurora Global Database to achieve low RTO/RPO and high availability.
Bu soruyu puanla