Skip to content

Will CloudFront to Internal ALB (via VPC Origin) Trigger `region-Requests-HTTP-Proxy` Charges?

0

Hi AWS team,

I recently came across the new CloudFront feature that allows using VPC origins, which makes it possible to route traffic to internal ALBs directly[1][2].

My question is:

If a CloudFront request is routed to an internal ALB via a VPC origin, will it incur the region-Requests-HTTP-Proxy charge[3]?

Thank you!

References:

  1. https://aws.amazon.com/blogs/aws/introducing-amazon-cloudfront-vpc-origins-enhanced-security-and-streamlined-operations-for-your-applications/
  2. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-vpc-origins.html
  3. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/billing-and-usage-interpreting.html
1 Answer
0

When CloudFront routes requests to an internal ALB via a VPC origin, you will incur the standard CloudFront request charges. These charges are based on the AWS Region you've configured for your origin and not based on the CloudFront edge location serving the content.

If you're using Origin Shield with your CloudFront distribution, additional charges would apply for requests that go through Origin Shield as an incremental layer. Origin Shield is charged as a request fee for each request that comes from another regional cache to your Origin Shield.

For requests between CloudFront and your internal ALB, there may also be data transfer costs to consider. When traffic crosses Availability Zones within your VPC, a charge of $0.01 per GB typically applies for both incoming and outgoing traffic. However, if your CloudFront distribution and ALB are in the same Availability Zone, these cross-AZ charges would not apply.

To track and correlate requests between CloudFront and your ALB, note that CloudFront adds a unique X-Amz-Cf-Id header to each request, while the ALB adds a unique X-Amzn-Trace-Id. These can be useful for request tracking, though the ALB access logs cannot be modified to include the CloudFront header.
Sources
WAF on ALB or CloudFront ? | AWS re:Post
Exploring Data Transfer Costs for AWS Network Load Balancers | Networking & Content Delivery
Amazon CloudFront CDN - Plans & Pricing - Try For Free
CloudFront - ALB log mapping | AWS re:Post

answered a year ago

AWS
EXPERT

reviewed a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.