Networking & Content Delivery
Category: *Post Types
Boost application performance: Amazon CloudFront enables HTTPS record
Amazon CloudFront announced support for Amazon Route 53 HTTPS DNS alias record across its global network, enabling clients to discover the optimal HTTP protocol during the initial DNS resolution phase rather than in a subsequent connection step. This helps users improve performance and security, and simultaneously reduce operational expenses. This post explores the implementation details, […]
Building secure multicloud access with AWS Client VPN and AWS Site-to-Site VPN
In today’s rapidly evolving cloud landscape, organizations are increasingly adopting multicloud strategies for several compelling reasons. Following mergers and acquisitions, companies need to integrate and maintain existing cloud solutions from both organizations. Different business units within an organization often have varying technical requirements and expertise, leading them to prefer specific cloud providers. For highly regulated […]
Addressing private IPv4 exhaustion with AWS Cloud WAN service insertion
In this post, we describe how you can use Amazon Web Services (AWS) Cloud WAN with service insertion to centralize your private NAT Gateways and PrivateLink to effectively and efficiently address private IPv4 exhaustion. We demonstrate how you can maximize the usage of available IP space while minimizing cost impact. Private IPv4 space, defined in […]
Introducing security group referencing and enhanced DNS support for AWS Cloud WAN
In this post we cover the recently launched feature of security group referencing and enhanced DNS support on AWS Cloud WAN. This new feature allows you to create inbound security rules referencing security groups defined in other Amazon Virtual Private Clouds (Amazon VPCs) attached to an AWS Cloud WAN within the same AWS Region and […]
Design and build IPv6 internet inspection architectures on AWS
As organizations increasingly adopt IPv6 to address public IPv4 exhaustion, private IPv4 scarcity—especially in large-scale networks—and the need to support IPv6-only clients, securing both IPv4 and IPv6 traffic becomes critical. We can apply consistent traffic inspection for inbound and outbound flows in Amazon Virtual Private Clouds (Amazon VPCs) to maintain security. In this post, we […]
Enabling out-of-band management for third-party appliances in AWS Cloud WAN
Introduction AWS Cloud WAN enables organizations to build and manage a global network across multiple AWS Regions. Through AWS Cloud WAN service insertion, you can integrate security appliances, either AWS-managed (such as AWS Network Firewall) or third-party solutions, to inspect and control traffic between network segments or outbound to the internet. Although AWS Cloud WAN […]
CORS configuration through Amazon CloudFront
Cross-origin resource sharing (CORS) is a security feature implemented by web browsers that controls which web pages or web applications are allowed to make requests to a different domain or origin. In other words, CORS is a mechanism that prevents a web page hosted on one domain from making requests for resources from a different […]
Performance and metrics enhancements for AWS Transit Gateway and AWS Cloud WAN
In late 2024 we launched several enhancements to AWS Transit Gateway and AWS Cloud WAN services: Path MTU Discovery (PMTUD) support for Transit Gateway and AWS Cloud WAN Appliance Mode Routing Enhancement for improved Availability Zone (AZ) awareness Per-AZ Amazon CloudWatch Metrics AWS Cloud WAN: Service Insertion Operational Enhancement In this post, we explain how […]
Introducing Amazon Route 53 authoritative DNS service for public hosted zones in AWS GovCloud (US) Regions
We are excited to announce the general availability of Amazon Route 53 authoritative Domain Name System (DNS) service for public hosted zones in AWS GovCloud (US). You can now create and manage public hosted zones in AWS GovCloud (US) to manage DNS for internet-facing applications and create alias records with targets to AWS services such […]
United Airlines implement enterprise-wide resilience program with AWS
This blog is co-authored with Jenny Zhou, Principal Enterprise Architect at United Airlines In this blog, we will explore how United Airlines implemented an enterprise-wide resilience program using Amazon Web Services (AWS). United Airlines, a major U.S. airline headquartered in Chicago, Illinois, announced its United Next plan in 2021. United Next is the airline’s plan […]