Now Health Based Detection offered by AWS Shield Advanced

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service which protects applications working on AWS. AWS Shield offers always-on detection and automatic inline mitigation that reduce application downtime and latency, so there is no requirement to occupy AWS Support to benefit from DDoS protection. There are two tiers of AWS Shield - Standard and Advanced. Now AWS Shield Advanced manages the health of your applications to better responsiveness and perfection in attack detection and mitigation. You can specify a health check in Amazon Route 53 and then link it with a resource which is safeguard by Shield Advanced via the console or API. You can implement health-based detection to all resource types that Shield Advanced supports: Elastic IP, Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, or Amazon Route 53. When you configure health-based detection, Shield Advanced apply the health of your application as an extra signal for attack detection, accompanying several other traffic attributes. This lets Shield Advanced to notice attacks much faster and at lower traffic thresholds, upgrading the DDoS resiliency of your application and stopping fake positive notifications. Resource health status will be obtainable to the DDoS response team too. Health based detection is accessible in every AWS region where Shield Advanced is available and can be activated without any extra charges. To get detailed information about Route 53 health checks, read How Amazon Route 53 Checks the Health of Your Resources and Creating and Updating Health Checks

Deep Dive Into Amazon Route 53

Amazon Route53 is a cloud based Domain Name System (DNS) web service.

It is developed to route end users to Internet applications like www.yourchoicexyz.com will be resolving some IP address like 192.0.2.4 as numeric. Route53 is also compatible with IPV6.

Amazon Route53 effectively connects any user request with infrastructures running in AWS like :

1. EC2 instances
2. Elastic Load balancers
3. Amazon S3 buckets

Also, can connect infrastructure outside AWS.

Simply we can configure Route53 for checking DNS health checks and depending on the status of health check routing traffic to healthy endpoints. Amazon Route53 also helps with domain registration.

Ex. yourchoicexyz.com and Amazon Route53 will configure DNS settings for domain automatically.

Benefits :

1. Flexible :

• Amazon Route53 can route traffic based on the following criteria such as latency, geo location and endpoint health check. Also, can configure multiple traffic policies and define which policy is to be active at a given time.
• You can create and change traffic policies using the GUI in the Route53 console or Amazon Route53 API.
• Feature of Traffic Flow versioning can put the history of changes in traffic policies, so that we can easily roll back to any previous version using  console or API.

2. Fast :

• Route53 is designed to automatically route end users to optimal locations depending on network condition. It also lets you further improve your end user's experience by running your application in multiple locations. 
• Route53 offers low query latency for your end users and low update latency for DNS management.

3. Secure :

• By using Access Management (IAM) and Route53 with AWS identity, we can grant unique credentials and manage permissions for user in your AWS account.

4. Cost-Effective :

• You simply pay only for the resources you use. The number of queries that the service answers for each of your domains through the service.

Terms Used For Route53 :

1. Hosted Zone :

• Hosted zone is nothing but configuring a new domain under Route53 to manage records for the domain. Registering A domain under Route53 is nothing but creating a hosted Zone.

2. Record Set :

• In each Hosted Zone, We can create multiple Record Sets. It is nothing but adding or creating or configuring any record for that particular domain.
• Types of records can be created as record set are A Record, CNAME Record, MX Record, TXT records, Alias etc.
• In the Route53 console, we are also intimated with the syntax and example for adding record sets for any hosted zone.

Kindly go through below screen-shots which helps for more practical view on configuring Route53 in AWS console :

Image 1 : To Create Hosted Zone



Image 2 : To Create Record Set in Created Record Zone

 

We hope this blog will help to understand the Amazon Route 53 basics. If you have any queries related to this blog topic, then feel free to write us at support@cloud.in