Monitoring Internet Performance with Amazon CloudWatch Internet Monitor - Visualizing Availability and Latency
Learn how Internet Monitor tracks application performance over the internet, analyzes availability by ISP, and detects health events.
Networking
Articles on VPC, CloudFront, Route 53, Direct Connect, and other networking services
Building a Private Cellular Network with AWS Private 5G - A Practical Guide to CBRS Spectrum and SIM Management
AWS Private 5G provides a private cellular network using CBRS spectrum as a managed service. It enables stable wireless connectivity across large areas such as factories, warehouses, and campuses - connectivity that is difficult to achieve with Wi-Fi - deployable in just days. This article covers network design, SIM management, and when to choose Private 5G over Wi-Fi from a practical perspective.
Domain Registration and DNS Migration with Amazon Route 53 - Registrar Transfers and Zone Configuration
A comprehensive walkthrough covering domain registration, transfers from other registrars, public and private hosted zone design, and enabling DNSSEC.
Building a Service Mesh with AWS App Mesh - Controlling and Observing Microservice Communication
Learn how to declaratively configure canary deployments, retry policies, and mTLS encryption using Envoy sidecars, and visualize service dependencies with X-Ray integration.
Multi-Account Design for Amazon VPC Lattice - RAM Sharing and Service Network Configuration Patterns
Learn how to design VPC Lattice for multi-account environments, including RAM sharing strategies, service network partitioning, and hierarchical Auth Policy design.
The Story Behind Route 53's Name and DNS Trivia - Why Port 53, and Why UDP
Starting with how Route 53 got its name from port number 53 and America's Route 66, this article explores why DNS uses UDP port 53, and what happens behind the scenes during DNS resolution.
How CloudFront's 600+ PoPs Work - Anycast Routing and the Cache Hierarchy
Learn how CloudFront routes user requests to the nearest PoP using Anycast, the two-tier structure of edge locations and regional edge caches, and the design factors that determine cache hit rates.
Visualizing Your Global Network with AWS Network Manager - Centralized Topology and Health Management
Learn how to visualize the topology of your global network including Transit Gateways and VPNs, and verify connectivity with route analysis.
Building Dedicated Connections with AWS Direct Connect - Redundancy Design and Traffic Control
Design redundant dedicated connections and connect to VPCs across multiple regions with Direct Connect Gateway. This article also covers bandwidth aggregation with LAG and MACsec encryption.
Amazon Route 53 DNS Design - Routing Policies and Health Checks in Practice
Achieve advanced traffic control with alias records and seven routing policies. This article covers multi-region failover design using health checks.
Elastic IP Address Management and Design - Static IP Usage and Cost Optimization
Learn about Elastic IP allocation, EC2 association, cost implications of unused EIPs, and alternative approaches to consider.
Amazon VPC Network Design - Subnet Architecture and NAT Gateway Optimization
Learn how to design public/private subnet separation, layered security group management, and reduce NAT Gateway costs with Gateway VPC Endpoints.
Service Networking with Amazon VPC Lattice - Simplifying Microservice Communication
Simplify cross-VPC and cross-account microservice communication with L7 service networking that requires no Envoy proxies. Learn about IAM authentication and when to choose VPC Lattice over App Mesh.
Building a Hub-and-Spoke Network with AWS Transit Gateway - Multi-VPC Connectivity Design
Consolidate multiple VPCs and on-premises networks in a hub-and-spoke topology, establish security boundaries with route table isolation, and enable multi-region connectivity through peering.
Private Connectivity with AWS PrivateLink - VPC Endpoints and Endpoint Services
Connect to AWS services privately without traversing the internet. Learn about free Gateway Endpoints and building Endpoint Services.
Global Network Optimization with AWS Global Accelerator - Low-Latency Delivery and Failover
Learn how to route traffic onto the AWS global network using Anycast IPs, design endpoint groups, and achieve failover through health checks.
Service Discovery with AWS Cloud Map - Dynamic Name Resolution for Microservices
Dynamically discover microservice endpoints using DNS-based and API-based approaches. Learn how to automate service registration and deregistration through integration with ECS and EKS.
Service Discovery - Automating Microservice Connectivity with AWS Cloud Map
Learn how to build service discovery with AWS Cloud Map. Covers DNS-based and API-based service detection, ECS/EKS integration, and App Mesh connectivity.
5G Edge Computing with AWS Wavelength - Designing Ultra-Low Latency Applications
Learn about running applications at the 5G edge with Wavelength, Wavelength Zone design, and practical use cases.
Why Is the Default VPC CIDR /16? - IP Address Design Trivia and Common Pitfalls
Learn why the default VPC CIDR is set to /16, the history of RFC 1918 private address space, the 5 reserved IP addresses in each subnet, and common CIDR design mistakes.
Why ELB Has Three Types - The Design Rationale Behind ALB, NLB, and CLB
Explore why ALB, NLB, and CLB (Classic) coexist rather than being unified into a single service, examining OSI model layers, performance characteristics, and historical context.
Dedicated Connection Design - Achieving Stable Private Network Connectivity with Direct Connect
Learn about dedicated connection design with AWS Direct Connect, including choosing between dedicated and hosted connections, redundancy configurations, and achieving stable private network connectivity through VPC integration.
What Is the VPC .2 Resolver? - AWS Internal DNS and Its Relationship with Route 53 Resolver
Learn what the DNS resolver at the CIDR+2 address inside a VPC actually is, how it works with private hosted zones, how Route 53 Resolver endpoints enable hybrid DNS, and how to use DNS query logs.
Security Groups Are Stateful, NACLs Are Stateless - The Design Decision Behind This Difference
Learn how Security Groups operate statefulness through connection tracking, why NACLs are stateless, the ephemeral port pitfall, and design patterns for defense in depth combining both.
Global Network Acceleration - Low-Latency Delivery with AWS Global Accelerator and CloudFront
Route traffic onto the AWS global network early using Anycast IPs to direct clients to the nearest edge location. This guide covers ALB/NLB integration and failover design.