root360 gmbh andreas ulm | 09.09 - aws community day traffic... · 2019-09-16 · aws waf internet...

9
High Traffic Scenarios - Issues & Strategies Andreas Ulm | 09.09.2019 root360 GmbH Community Day 2019 Sponsors

Upload: others

Post on 05-Jul-2020

2 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

High Traffic Scenarios - Issues & StrategiesAndreas Ulm | 09.09.2019root360 GmbH

Community Day 2019 Sponsors

Page 2: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

High Traffic?

● event driven vs. repeated vs. application● network bandwidth● request count● internal & external● inbound & outbound

2

Page 3: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

Infrastructure

3

Page 4: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

Know Your ApplicationHallhuber (Magento 2): ~2k web requests => ~46k redis commands (Get & Set)

4

Page 5: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

Know your Trafficbig sneaker seller (OXID)

~7M requests / h, ~2.3M malicious traffic

5

Page 6: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

Warm-Up

● warm-up of ASG○ increase instance count

● warm-up loadbalancer / CDN cache○ via AWS Support○ via request generators

● many server vs. big servers

6

Page 7: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

Reduce Network Latency

7

● central cache vs. local cache● single-AZ

Page 8: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

Scale CDNSugarshape VIB-Box (“Die Höhle der Löwen”)

allow slow-down of your business processes

8

Page 9: root360 GmbH Andreas Ulm | 09.09 - AWS Community Day Traffic... · 2019-09-16 · AWS WAF Internet CloudFront VPC I—ITT P/ HTTPS ALB Public-DMZ Jump-Server Gateway- DMZ AWS NatGW

Q / A

9