跳至内容

Does Global Accellerator before and ALB have a concurrent connection limit from single source IP

0

Hi

We have deployed a global accellerator before our ALB to give us static ips to whitelist on our APN sim cards we on our devices. The APN send traffic from the same source IP through the global accelerator to our ALBs. We noticed that it seems new connections are capping around plus minus 60k; if we remove the global accelerator, new connections jump to 105k.

We also noticed that if we change the source IP, the new connections jump up but eventually get capped at plus minus 60k again.

I checked documentation but cant find any mention of a limit for single source IP to global accelerator or ALB.

Thank you in advance for any suggestions or help.

已提问 2 年前345 查看次数
2 回答
1
已接受的回答

In theory, given the 16 bit number that represents the source port number; and subtracting for "reserved" ports on any particular operating system, ~60k sessions from a single IP address is about right. Especially if it is a single port that the application is connecting to.

The reason you're seeing far more than that to ALB directly is probably because your connections are happening to each ALB node. If you look at the DNS response for the ALB you should see two or three IP addresses; connections to those will multiply the ~60k number.

So this isn't an AWS limit; it's a TCP (and UDP) limit.

AWS
专家
已回答 2 年前
专家
已审核 2 年前
AWS
专家
已审核 2 年前
0

Thank you for the quick response. I found that limit, but because the Global Accelerator has two static IPs, I was expecting around 120k before starting to see the cap. The "reserved" ports may bring the count down a bit more, or one IP may be preferred above another one cause of the location of the source IP.

已回答 2 年前
  • Are you sure you're connecting to both Global Accelerator IP addresses?

  • While AWS Global Accelerator provides two active Anycast IP addresses for redundancy and high availability, it's normal and expected for individual clients to consistently use just one of these addresses for their connections. The apparent use of a single IP doesn't mean the second IP isn't active or available; it's simply a result of typical client behavior and connection management. Please check your clients application configurations too.

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

相关内容