Live data from Hacker News

AWS Network Load Balancer

aws.amazon.com

101–110 of 122 posts

Re: AWS Network Load Balancer

#101

Feature request : Please allow weighted load balancing i.e. ability to distribute traffic in a user specified ratio (weights) to different sized instances.

Better: distribute to the instance with the lowest % CPU by default, ala the Google Cloud NLB.

That's very hard to get right. If you don't have exactly the right cool downs and back offs, you get oscillating load.

Re: AWS Network Load Balancer

#102

Earlier quoted context omitted.

You can use direct server return to manipulate the Ethernet frames so that packets don't travel back through the load balancer on the way to the parent switch.

Direct Server Return works at layer 3 not layer 2, its routing and encapsulation - IP in IP, GRE etc.

You can do it at layer 2 as well, but it requires that the load balancer have an interface on the same broadcast domains as the hosts.

Re: AWS Network Load Balancer

#103

Feature request : Please allow weighted load balancing i.e. ability to distribute traffic in a user specified ratio (weights) to different sized instances.

Better: distribute to the instance with the lowest % CPU by default, ala the Google Cloud NLB.

This is what ELB Classic did for a long time - but we're experimenting with new algorithms. The problem with this approach is that it's not cache friendly.

When you bring in a new server to a busy workload, it gets all of the new connections. That can put a lot of pressure on that host - and if the application relies on caching, which most do in some form, it can really make performance terrible and even trigger cascading failures.

Another problem is that if a single host is broken or misconfigured, throwing 500 errors, it is often also the fastest and lowest CPU box, because that isn't very expensive. It can suck in and blackhole all of the traffic.

Based on how these issues work out at scale, we've moved beyond simple load based load balancing (I know that sounds counter-intuitive) and into algorithms that try to achieve a better balance for a wider range of scenarios.

Re: AWS Network Load Balancer

#104
post #2

If you're curious to see NLB in action, here's a live demo: http://nlb-34dc3b430638dc3e.elb.us-west-2.amazonaws.com/ , it took about 5 minutes in the console to set it up and no changes on the targets/backends. Massive disclaimer: I work on NLB.

Any idea how long for GovCloud?

Do you have a support POC? I'd reach out to them as they should be able to provide you with a roadmap update. If you're not sure who that is, you can reach out to me at kozlowck at amazon.com.

Re: AWS Network Load Balancer

#105
post #23

Earlier quoted context omitted.

Hello fellow GovCloud user, would love to compare notes if you're game. je@h4x.club :)

I got to say, asking about Gov Cloud and with that email address your post sounds like a terrible spear phishing attempt :)

Pretty sure that's the entire point :)

Re: AWS Network Load Balancer

#106
I have just finished setting up a new front-end for a few services (we are just about to start migrating production systems to it).

I was aiming to use static IPs (for client firewall rules), and simplify networking configuration, so what I ended up with is an auto-scaling group of HAProxy systems that run a script every couple of minutes to assign themselves an elastic IP from a provided list. Route 53 is configured with health checks to only return the IP(s) that are working.

The HAProxy instances also continuously read their target auto-scaling groups to update backend config, and do ssl terminating, also running the Let's Encrypt client. Most services are routed by host name, but a couple older ones are path-based and there are some 301 redirects.

I think NLB could replace the elastic IP and route53 part of this setup, but I'd still need to do SSL, routing, and backends. It's too bad, because my setup is one that could be used nearly anywhere that has more than one public-facing service, but there's not much built-in to help - I had to write quite a few scripts to get everything I needed.

Re: AWS Network Load Balancer

#107
I don't understand the pricing model. 800 new connections per hour, for $0.006? Isn't that extremely expensive? 80,000 connections for $0.60 in an hour is $432 per month for not a whole lot of traffic.

edit: Okay, it's 800 new connections per second, per the ELB pricing page, under "LCU details". The cost for 80k connections in an hour is effectively constrained by the bandwidth, eg if there's very low bandwidth it's $0.006/hour or $4.32/month.

Re: AWS Network Load Balancer

#108

Earlier quoted context omitted.

I got to say, asking about Gov Cloud and with that email address your post sounds like a terrible spear phishing attempt :)

Pretty sure that's the entire point :)

Was it? neom has posted that email in the past.

Re: AWS Network Load Balancer

#109
post #75

I was just wondering if this is something purely developed inside amazon or is it backed by an ADC like NetScaler or F5. does anyone know any detail ? I'm assuming that classic load balancer is some third-party or old framework and this is something amazon developed internally.

I would assume that it's something developed internally at Amazon. Networking inside of AWS isn't standard fare and I doubt something like NetScaler or F5 products would be able to be used. Generally speaking, they aren't using TCP/IP behind the curtain, to move packets between nodes. AWS has even created their own routing hardware/software because no other company could do what they need at the scale that they need.…

AWS & Amazon uses a LOT of routers from one of these vendors. Although, they would probably try and avoid baking it into a public-facing product like this.

Re: AWS Network Load Balancer

#110

Earlier quoted context omitted.

That’s kind of the answer I was expecting, just hoping it wasn’t the case. From the marketing material they really want you to move, but not having a solution to offload tls makes it impossible for us. And it worries me to see the CLB getting effectively deprecated with it an alternative

ALB can term TLS for h2 and wss: https://aws.amazon.com/elasticloadbalancing/ sounds like that's what you might want?

Unfortunately we are currently on a custom TCP-based protocol (we're in the game space). But yes, this is more incentive for us to consider h2 or wss.
Post reply on HN