スキップしてコンテンツを表示

Does Global Accellerator before and ALB have a concurrent connection limit from single source IP

0

Hi

We have deployed a global accellerator before our ALB to give us static ips to whitelist on our APN sim cards we on our devices. The APN send traffic from the same source IP through the global accelerator to our ALBs. We noticed that it seems new connections are capping around plus minus 60k; if we remove the global accelerator, new connections jump to 105k.

We also noticed that if we change the source IP, the new connections jump up but eventually get capped at plus minus 60k again.

I checked documentation but cant find any mention of a limit for single source IP to global accelerator or ALB.

Thank you in advance for any suggestions or help.

2回答
1
承認された回答

In theory, given the 16 bit number that represents the source port number; and subtracting for "reserved" ports on any particular operating system, ~60k sessions from a single IP address is about right. Especially if it is a single port that the application is connecting to.

The reason you're seeing far more than that to ALB directly is probably because your connections are happening to each ALB node. If you look at the DNS response for the ALB you should see two or three IP addresses; connections to those will multiply the ~60k number.

So this isn't an AWS limit; it's a TCP (and UDP) limit.

AWS
エキスパート
回答済み 2年前
エキスパート
レビュー済み 2年前
AWS
エキスパート
レビュー済み 2年前
0

Thank you for the quick response. I found that limit, but because the Global Accelerator has two static IPs, I was expecting around 120k before starting to see the cap. The "reserved" ports may bring the count down a bit more, or one IP may be preferred above another one cause of the location of the source IP.

回答済み 2年前
  • Are you sure you're connecting to both Global Accelerator IP addresses?

  • While AWS Global Accelerator provides two active Anycast IP addresses for redundancy and high availability, it's normal and expected for individual clients to consistently use just one of these addresses for their connections. The apparent use of a single IP doesn't mean the second IP isn't active or available; it's simply a result of typical client behavior and connection management. Please check your clients application configurations too.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

関連するコンテンツ