Soru

Zorluk: OrtaHigh Availability and Disaster Recovery Design

A municipal agency is designing a cloud-native smart-grid telemetry ingestion system to monitor real-time energy distribution. The core application runs on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The application database is hosted on Amazon Aurora PostgreSQL. The architecture must be highly resilient across two AWS Regions to handle regional outages. The business requirements specify an active-passive disaster recovery strategy with a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 1 minute. Outbound internet traffic for the private EC2 instances must remain highly available during a local Availability Zone outage. Which two architectural configurations should the solutions architect implement to satisfy these requirements?

  1. Configure Amazon Route 53 with a failover routing policy, designating the primary region's Application Load Balancer as active and the secondary region's Application Load Balancer as passive, and associate active Route 53 health checks with both endpoints.Cevap
  2. Create an Amazon Aurora Global Database with the primary database cluster in the active region and a secondary cluster in the passive region, and deploy a NAT Gateway in each Availability Zone utilized by the private EC2 instances in both regions.Cevap
  3. C
    Provision a single NAT Gateway in one public subnet for each region's VPC, configure the route tables in all private subnets to point outbound traffic to this single gateway, and configure Route 53 failover routing.
  4. D
    Enable Aurora replica auto scaling for read replicas deployed in the standby region to automatically promote a standby instance to a primary writer cluster during a regional failover event.
  5. E
    Configure AWS Backup to take hourly database snapshots and replicate them to the standby region, and set up Amazon Route 53 latency-based routing without active health checks.
  6. F
    Configure Route 53 Private Hosted Zones for public DNS resolution and associate the hosted zone only with the primary region's VPC, while deploying NAT Instances in each Availability Zone.

Cevap

The correct configurations are to deploy an Amazon Aurora Global Database with regional NAT Gateways in each Availability Zone, and to set up Route 53 failover routing with active health checks targeting the Application Load Balancers.
To meet the 1-minute RPO, a replication mechanism with very low latency is required. Amazon Aurora Global Database replication has typical latencies of under a second. To meet the 15-minute RTO, traffic redirection must be automated, which is achieved by using Route 53 failover routing with active health checks to monitor the Application Load Balancers. Finally, deploying a NAT Gateway in each Availability Zone utilized by the private EC2 instances ensures that outbound connectivity remains operational even during a single Availability Zone outage, preventing a single point of failure.

Adım Adım Çözüm

1
Evaluate the database replication strategy to satisfy the 1-minute RPO.
Aurora Global Database replication latency is typically under 1 second, fulfilling the RPO constraint.
Standard multi-region database replication options like backup replication or manual promotion from read replicas cannot satisfy near-zero or sub-minute recovery point requirements.
2
Establish the multi-region traffic routing strategy for disaster recovery.
Route 53 active-passive failover routing with health checks monitors the primary ALB and automatically redirects DNS traffic during a regional outage, satisfying the 15-minute RTO.
Active health checks are necessary to trigger automated DNS failover without manual intervention.
3
Architect outbound internet access for private instances to survive a local zone outage.
Deploying a NAT Gateway in each Availability Zone utilized by the VPC resources provides zone-independent outbound routing.
A single NAT Gateway per VPC creates a single point of failure if its hosting Availability Zone goes down.

Anahtar Kavram

Disaster recovery planning with tight RTO/RPO requirements requires automated traffic routing failover and low-latency database replication, coupled with zone-redundant NAT architectures to prevent single points of failure.
Tahmini Süre:2m 0s
Bu soruyu puanla