AWS Global Networking & Route 53: SAP-C02 Study Guide
AWS networking concepts (for example, Amazon Route 53, routing methods)
AWS Global Networking & Route 53: SAP-C02 Study Guide
This guide explores the foundational and advanced networking components required for the AWS Certified Solutions Architect - Professional (SAP-C02) exam, focusing on high availability, global traffic management, and latency optimization.
Learning Objectives
By the end of this guide, you should be able to:
- Differentiate between Route 53 routing policies and their specific use cases.
- Compare global acceleration services including CloudFront, Global Accelerator, and S3 Transfer Acceleration.
- Evaluate network topology decisions using the "One-way door" vs. "Two-way door" framework.
- Design highly available public endpoints using ELB, Route 53, and health checks.
Key Terms & Glossary
- Anycast Routing: A networking technique where multiple nodes share the same IP address, and requests are routed to the "nearest" node in terms of network hops.
- R53 Health Checks: Monitoring tools that verify the reachability and status of resources, enabling automatic DNS failover.
- Edge Location: Site used by CloudFront and Route 53 to cache content or handle DNS queries closer to the end-user.
- SLA (Service Level Agreement): The guaranteed uptime for a service (e.g., 99.99% for ALB/NLB).
- Transitive Routing: The ability for traffic to pass through a middle-man component (like a Transit Gateway) to reach another destination.
The "Big Idea"
In a global architecture, the network is the primary constraint on user experience. AWS networking is designed to shift traffic management from the core (the data center) to the Edge (the user's doorstep). By using Route 53 and Anycast technology, AWS ensures that high availability is not just a regional feature, but a global one that remains consistent regardless of local network conditions.
Formula / Concept Box
| Feature | Route 53 Routing Method | Primary Use Case |
|---|---|---|
| Latency | Latency-based Routing | Minimize round-trip time for users across multiple regions. |
| Availability | Failover Routing | Active-Passive disaster recovery configurations. |
| Proximity | Geoproximity Routing | Route based on geographic location with optional "bias" to expand/shrink regions. |
| Traffic Split | Weighted Routing | Blue/Green deployments or testing new software versions. |
Hierarchical Outline
- Global Traffic Management
- Amazon Route 53: Scalable DNS, domain registration, and health checks.
- Anycast Technology: Optimized request handling based on network conditions.
- Latency & Performance Optimization
- Amazon CloudFront: Content Delivery Network (CDN) for caching HTTP/S content.
- AWS Global Accelerator: Uses static IPs and the AWS global network for non-HTTP (TCP/UDP) performance.
- S3 Transfer Acceleration (S3TA): Accelerated uploads/downloads to S3 buckets over long distances.
- High Availability Building Blocks
- Elastic Load Balancing (ELB): ALB (Layer 7), NLB (Layer 4), GWLB (Security Appliances).
- Enhanced Networking: Using ENA and Nitro cards for up to 100 Gbps on EC2.
- Elastic Fabric Adapter (EFA): Specialized for HPC and low-latency inter-node communication.
Visual Anchors
Traffic Flow via Route 53 Anycast
Latency-Based Routing Visualization
Definition-Example Pairs
- Two-Way Door Decision: A decision that is easily reversible without significant cost.
- Example: Changing an EC2 instance type from
m5.largetom5.xlargeto handle increased CPU load.
- Example: Changing an EC2 instance type from
- One-Way Door Decision: A strategic choice that is difficult or expensive to reverse once implemented.
- Example: Choosing between a Hub-and-Spoke (Transit Gateway) or a Mesh (VPC Peering) network topology for 50+ VPCs.
- Enhanced Networking: Specialized hardware and drivers that provide higher I/O performance.
- Example: Utilizing an Elastic Network Adapter (ENA) on an
m5n.24xlargeinstance to achieve 100 Gbps throughput for a data-intensive batch job.
- Example: Utilizing an Elastic Network Adapter (ENA) on an
Worked Examples
Example 1: Global Accelerator vs. CloudFront
Scenario: A gaming company needs to route global UDP traffic to their game servers with the lowest possible jitter and fixed entry points.
- Problem: CloudFront only supports HTTP/S and does not provide static IPs for the edge.
- Solution: Use AWS Global Accelerator. It provides two static Anycast IPs and supports non-HTTP protocols like UDP. It leverages the AWS private fiber network to bypass the public internet congestion.
Example 2: S3 Transfer Acceleration
Scenario: A research lab in Australia needs to upload 1TB datasets to an S3 bucket in us-east-1 (Virginia).
- Step-by-Step Breakdown:
- Enable S3TA on the destination bucket.
- The lab uses a specialized endpoint:
bucketname.s3-accelerate.amazonaws.com. - Data travels over the short distance from Australia to the nearest AWS Edge Location.
- From the Edge, the data is carried over the AWS backbone network, which is optimized and more reliable than the public internet.
Checkpoint Questions
- Which Route 53 routing policy would you use to direct 10% of your traffic to a new beta environment?
- What is the primary difference between how CloudFront and Global Accelerator improve performance?
- Why is choosing a network topology considered a "one-way door" decision?
- Which EC2 feature allows for low-latency inter-node communication specifically for HPC applications?
▶Click to see answers
- Weighted Routing.
- CloudFront caches content (CDN); Global Accelerator optimizes the network path (TCP/UDP/Static IPs).
- Because migrating from one topology (like mesh) to another (like hub-and-spoke) is operationally complex, painful, and costly.
- Elastic Fabric Adapter (EFA).
Muddy Points & Cross-Refs
- CloudFront vs. S3TA: Both use edge locations, but S3TA is specifically for S3 object transfers, while CloudFront is for general content delivery and caching.
- Route 53 Latency vs. Geolocation: Latency routes based on network speed; Geolocation routes based on where the user's IP is physically located. These are not always the same (e.g., a user in a country with poor infrastructure might have lower latency to a different region than their physical proximity suggests).
- Further Study: See Chapter 6: Meeting Reliability Requirements for deep dives into VPC peering vs. Transit Gateway costs.
Comparison Tables
CloudFront vs. Global Accelerator
| Feature | CloudFront | Global Accelerator |
|---|---|---|
| Primary Goal | Caching/Content Delivery | Network Path Optimization |
| Protocol Support | HTTP / HTTPS / WebSocket | TCP / UDP |
| Edge Capability | Caches data at the edge | Routes traffic to the AWS backbone |
| IP Address | Dynamic / DNS-based | 2 Static Anycast IPs |
| Best for... | Images, Video, API caching | Gaming, IoT, Multi-region failover |
ELB Type Selection
| Type | OSI Layer | Use Case |
|---|---|---|
| ALB | Layer 7 | HTTP/HTTPS, path-based/host-based routing. |
| NLB | Layer 4 | High performance, static IPs, TCP/UDP. |
| GWLB | Layer 3 | Inspecting/Filtering traffic via 3rd party appliances. |