Auto failover between zonal VPCEndpoints

Question

I own SaaS service on AWS. I've created service endpoint using AWS privateLink. I want to recommend consumers to create 1+ Interface endpoints in subnets that span 1+ AZs to support High Availability for their applications.

The generated regional DNS will resolve to the IPs of those two VPCEndpoints. If one AZ is down and hence the local VPCEndpoint. How can applications running from other AZs still connect to my service via the remaining VPCEndpoint?

We tried mucking with Route53 health checks and failover but it seems it only work with EC2 instances only...?!

I get that I can configure the application to use Zonal endpoints. But failover requires application update to point to the other standing zonal endpoint.

Answer

The regional DNS name provided for each PrivateLink endpoint will automatically load balance between health ENIs in the endpoint (through round-robin DNS resolution). It does health checking to ensure only health ENIs are returned. If you are using the zonal hostname, you will need to add in logic into the application for failover.

Auto failover between zonal VPCEndpoints

Relevanter Inhalt