Please enable JavaScript.

Coggle requires JavaScript to display documents.

DVA - Coggle Diagram

- - - - https://github.com/shahidadoni/coggle/blob/main/aws/ec2/ec2_instance_types_example.png
  - - - Balance between
        
        Compute
        
        Memory
        
        Networking
    - - For Batch processing workloads, Media transcoding, High performance web servers, High performance computing (HPC), scientific modelling and machine learning and dedicated gaming servers
    - - High performance, relational/non-relational databases, distributed web scale cache stores, in-memory databases optimized for BI, applications performing real time processing of big unstructured data.
    - - High Frequency online transaction processing (OLTP) systems, relational and noSQL databases, Cache for in memory databases, Data warehousing applications, Distributed file systems
  - - - Ports to know
        
        22 : SFTP/SSH log into a linux instance
        
        21 : FTP File transfer protocol upload file using SSH
        
        80 : HTTP access unsecured websites
        
        443 : HTTPS access secured websites
        
        3389 : RDP remote desktop protocol log into a windows instance
- - - - https://github.com/shahidadoni/coggle/blob/main/aws/vpc/private_instance_nat_gateway.png
        
        https://github.com/shahidadoni/coggle/blob/main/aws/vpc/3_tier_architecture.png
- - - - Minimum password length
        
        Uppercase
        
        Lowercase
        
        Numbers
        
        Non-alphanumeric
        
        Allow users to change own passwords
        
        Set password Expiration
        
        Prevent Password Re-use
    - - Virtual
        
        Google Authenticator
        
        Authy
        
        Universal Second Factor (U2F) Security Key
        
        Yubikey
        
        Hardware Key Fob
        
        Gemalto
        
        SurePassId
- - - - gp3: baseline of 3000 IOPS and throughput of 125 MB/s. Increase IOPS upto 16000 and throughput upto 100 MB/s independently
        
        gp2: burst IOPS to 3000, size of volume and IOPS are linked max IOPS is 16000. 3 IOPS per GB means at 5334 GB we are at max IOPS.
        
        io1 (4GB - 16TB) : max provisioned IOPS (PIOPS) 64000 for nitro EC2 instances and 32000 for other. Can increase IOPS independently from storage size
        
        io2 Block Express ( 4GB - 64TB) : sub millisecond latency, max PIOPS 256000 with an IOPS GB ratio of 1000:1. Supports EBS multi attach
        
        st1 HDD 125GB - 16TB: Throughput optimized 500 MB/s - max IOPS 500
        
        sc1 Cold HDD : For data that is infrequently accessed, scenario where lowest cost is important, max throughput 250 MB/s - max IOPS 250
- - - - SSL/TLS Basics
        
        SSL certificate allows traffic between your clients and your load balancer to be encrypted in transit
        
        SSL refers to Secure Sockets Layers, used to encrypt connections. TLS refers to Transport Security Layer which is a newer version.
        
        Nowadays TLS certificates are mainly used but people still refer it as SSL.
        
        Public SSL certificates are issued by Certificate Authorities (CA) like Comodo, Symantec, GoDaddy, GlobalSign, Digicert, Letsencrypt, etc.
        
        SSL certificates have an expiration date which must be renewed
        
        Server Name Indication (SNI)
        
        SNI solves the problem of loading multiple SSL certificates onto one web server to serve multiple websites
        
        Its a newer protocol and requires the client to indicate the hostname of the target server in the initial SSL handshake.
        
        The server will find the correct certificate or return the default one.
        
        Only works for ALB and NLB and CloudFront
        
        Connection Draining
        
        Connection Draining for CLB and Deregistration Delay for ALB and NLB.
        
        It is basically time to complete "in-flight requests" while the instance is de-registering.
        
        Time can be set between 1 to 3600 seconds default is 300 seconds. It can also be disabled by setting to zero