极致时延游戏体验的网络与安全实践.pdf

1、?Amazon?31?4?99?32?Local Zone?21?400+?13?115+?GovCloud?GovCloud?Amazon?A m a z o n?400 Gbps?245?Region,Local Zone?务?Oversubscription?TCP Congestionx?TCP?Scalable Reliable Datagram(SRD)?SRD?EFAEBSENA?&?-?Amazon Cloud WANAmazon Cloud WANRegion 3Region 2Region 1Core networkDevelopmentProductionVPCVPCVP

2、CVPCVPCVPCTGWSecurityVPCVPCAmazon Direct Connect GatewayVPCRemote usersSandboxHybridVPN SitesDX SiteBranchofficesRemote usersClient VPNVPCConnectDX SiteVPNSD-WAN sitesDX Site?务?务?VPC REACHABILITY ANALYZERVPC NETWORK ACCESS ANALYZERCLOUD WANIP ADDRESS MANAGER(IPAM)Amazon Network Manager?SCREENSHOT?-?

3、Internet?ASN?Amazon CloudWatch Internet Monitor?/?ISP/ASN?/ASN?Region?Local ISPNetwork ABCDEF?Global Acceleratoredge PoPLocal ISP?(?)?(?)?,API,WebSockets?HTTP?WebSocket?(?)?TCP/TLS?TCP/UDP?HTTP?TCP/UDP?HTTP?(BGP Anycast)?TCP?Public InternetPublic Internet?CloudFront?Public Internet?Global Accelerato

4、rNetworkFirewallEncryptionAmazon ShieldSecurity Groups and ACLsPartner AppliancesDNS FirewallNATGatewayGateway Load BalancerAmazon WAF?Viewer requestOrigin requestBot controlAmazon WAFShield Advanced?DDoS?Shield AdvancedDDoS?AmazonShield?(SRT)Web?Amazon WAF?(AMRs)OWASP Top 10 AMR?Amazon WAF Bot Cont

5、rol?good bots?bad bots?2021,Amazon Web Services,Inc.or its affiliates.All rights reserved.?-WAF?rule group.?IP CIDR?IPs,?IPs,etc.?“Allow”?rule group.?IP CIDR?.?XFF?.?“Block”?“Count”(if you wish)?label:“bot:verified”?URL?Scope Down?2021,Amazon Web Services,Inc.or its affiliates.All rights reserved.?-

6、Log WAF Hub?Kinesis FirehoseDelivery Stream?WAF 日志写入方式 2快且便宜推荐!1WAF?11S3?SQS?SQS2?Lambda?3?4OpenSearch?5?Log ProcessorWAFWeb ACLhttps:/log-hub.docs.solutions.gcr.aws.dev/2021,Amazon Web Services,Inc.or its affiliates.All rights reserved.2021,Amazon Web Services,Inc.or its affilia