AWS Webcast - Amazon CloudFront Zone Apex Support & Custom SSL Domain Names
Upcoming SlideShare
Loading in...5
×
 

Like this? Share it with your network

Share

AWS Webcast - Amazon CloudFront Zone Apex Support & Custom SSL Domain Names

on

  • 1,320 views

In this webinar, we will demonstrate two new features that make it even easier for you to deliver content with Amazon CloudFront. ...

In this webinar, we will demonstrate two new features that make it even easier for you to deliver content with Amazon CloudFront.

First, we’ll demonstrate how use can use Amazon Route 53, AWS’s authoritative DNS service, to configure an ‘Alias’ record that lets you use CloudFront to deliver your website at the root domain, or "zone apex." This feature enables you to map the apex or root (e.g. “example.com”) of your domain name to your CloudFront distribution. Then, visitors to your website can easily and reliably access your site from their browser without specifying “www” in the web address.

Second, we’ll demonstrate how you can use a custom SSL certificate with CloudFront to deliver content over HTTPS using your own domain name. With custom SSL domain names, your customers now get the low latency, reliability, and scalability benefits of CloudFront’s entire global edge location network when downloading your content over an SSL connection using your own domain name.

Statistics

Views

Total Views
1,320
Views on SlideShare
1,320
Embed Views
0

Actions

Likes
0
Downloads
23
Comments
0

0 Embeds 0

No embeds

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

AWS Webcast - Amazon CloudFront Zone Apex Support & Custom SSL Domain Names Presentation Transcript

  • 1. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.New Amazon CloudFront Features:CloudFront Custom SSL CertificatesZone Apex Support for CloudFront…to help make Whole Site Delivery easier with CloudFront!Nihar Bihani – Sr. Product Manager, Amazon CloudFrontnihar@amazon.com
  • 2. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.AgendaLearn about new CloudFront features:• Custom SSL Certificate Support• Zone Apex Support for CloudFrontUse Case: Whole Site DeliveryWhy use CloudFront for Whole Site Delivery?Demo
  • 3. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.CloudFront Custom SSL Certificate Support
  • 4. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Custom SSL Certificate Support for CloudFront: WHAT?Custom SSL Certificate support lets you use CloudFront todeliver content over HTTPS using your own domain nameand your own SSL certificate.
  • 5. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Custom SSL Certificate Support for CloudFront: WHY?…helps lower latency and increase reliability of websites, while getting thesecurity benefits of using your own SSL certificate.Whole Site Delivery – Deliver your entire website, including the dynamic and secureportions of the site, using CloudFront.Cookie Access – Cookies are generally is restricted by most web browsers to thedomain (or sub-domain) that originally sets the cookie. You thus need to use yourown custom domain name when setting cookies on HTTPS pages.Branding – Use your own brand name in your URLs instead of d123.cloudfront.net.
  • 6. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Custom SSL Certificate Support for CloudFront: HOW?1. You upload your own SSL certificate to AWS IAM.2. Request access to this feature by submitting this form:http://aws.amazon.com/cloudfront/custom-ssl-domains/3. Once approved by AWS, you can associate your SSL certificate to oneor more CloudFront distributions.4. Start using your own domain name (e.g. mysite.com) in your HTTPSURLs delivered via CloudFront.
  • 7. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Custom SSL Certificate Support for CloudFront: PRICING• Simple, predictable pricing. Monthly cost of $600 per custom SSLcertificate, pro-rated by the hour.- No initial set-up fees- No premium on data transfer pricing- Self-service; no need for professional services or consultants• You may use any type of certificate – wildcard, EV, SAN, etc.• You can use the same certificate with multiple CloudFront distributions.• ALL CloudFront edge locations used to serve HTTPS requests for bestpossible performance.
  • 8. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Zone Apex Support for CloudFront
  • 9. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Zone Apex Support for CloudFront: WHAT?"Zone apex" is the root domain of a website (example.com, without thewww).Problem: The DNS specification requires "zone apex" to point to an IPaddress (an ‘A’ record), not a CNAME (such as the name AWSprovides for a CloudFront distribution, ELB, or S3 website bucket).Solution: Use Route 53’s ALIAS record.
  • 10. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Zone Apex Support for CloudFront: WHY?• Route 53 helps make it easy and reliable to configure a zone apex record(Route 53 calls this an ‘Alias’ record) for AWS resources.• You can now use CloudFront to deliver content from the root domain, or"zone apex" of their website – i.e. configure both http://www.example.comand http://example.com to point at the same CloudFront distribution.• It’s Free – ‘Alias’ queries that are mapped to a CloudFront distribution areprovided free of charge.
  • 11. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Zone Apex Support for CloudFront: HOW?The Route 53 console supports configuring ALIAS queries for CloudFront distributions.
  • 12. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Use Case: Whole Site Delivery
  • 13. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.DynamicStaticWhat is Whole Site Delivery?
  • 14. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Typical Website ArchitectureElastic LoadBalancingDynamic ContentAmazon EC2Static ContentAmazon S3cdn.example.com/*.jpgwww.example.com/*.phpCustom OriginORORCustom Origin
  • 15. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Whole Site Delivery with CloudFrontElastic LoadBalancingDynamic ContentAmazon EC2Static ContentAmazon S3 Custom OriginORORCustom OriginAmazon CloudFrontwww.example.com*.jpg*.php
  • 16. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Whole Site Delivery: Common MythsMyths…None of my HTML pages are cacheable.My HTML pages are customized sothose cannot be cached.My pages are personalized and uniquefor each user, so a CDN won’t be useful.Debunked…Often, many pages are cacheable – e.g.search results pages.Use Cookies and Query Strings ascache keys – e.g. local weather pages.Network and path optimizations allowCloudFront to speed up dynamic content– e.g. personalized pages.
  • 17. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Whole Site Delivery Use Cases• News• Weather• Sports• Social Media• Advertising• Stocks• Ecommerce [NEW!]• Travel [NEW!]
  • 18. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Why use CloudFront for Whole Site Delivery?
  • 19. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Benefits of Whole Site Delivery with Amazon CloudFrontMaking your web applications…….FasterScale BetterMore AvailableEasier to ManageCost Less…by leveraging AWS’ presence at the edge of the Internet.
  • 20. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.CloudFront can make your web applications…….FasterScale BetterMore AvailableEasier to ManageCost Less
  • 21. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Faster: The Performance ProblemLong Distance + Poor Network = Slow Load Times
  • 22. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Faster: How CloudFront HelpsCloudFront helps change this equation to…Short Distance + Optimized Network = Fast Load Times
  • 23. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Faster: Global CloudFront NetworkEuropeAmsterdam (2)DublinFrankfurt (2)London (2)MadridMilanParis (2)StockholmAsiaHong Kong (2)OsakaSingapore (2)Tokyo (2)South AmericaSao PauloNorth AmericaAshburn, VA (2)Dallas, TX (2)Hayward, CAJacksonville, FLLos Angeles, CA (2)Miami, FLNewark, NJNew York, NY (3)Palo Alto, CASeattle, WASan Jose, CASouth Bend, INSt. Louis, MOAustraliaSydney
  • 24. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Faster: Optimized Network PathsDynamic ContentStatic ContentAmazon CloudFrontwww.example.com*.jpg*.phpLow LatencyTCP/IP Window SizingPersistent ConnectionsMonitored Network Paths
  • 25. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.CloudFront can make your web applications…….FasterScale BetterMore AvailableEasier to ManageCost Less
  • 26. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Scale Better: How CloudFront HelpsCaching static content at the Edge.Offloading connection set-up and SSL negotiation to the Edge.Persistent connections and collapse forwarding help scale yourorigin.
  • 27. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.CloudFront can make your web applications…….FasterScale BetterMore AvailableEasier to ManageCost Less
  • 28. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.More Available: How CloudFront HelpsCloudFront is architected for high availability.Serve cached content even when origin is unavailable.Availability SLA.
  • 29. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.CloudFront can make your web applications…….FasterScale BetterMore AvailableEasier to ManageCost Less
  • 30. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Easier to Manage: How CloudFront HelpsNo need to write any custom code.No need to split-up the website across multiple domains (e.g. fordynamic and static content, or https vs. http)- Multiple origins and cache behaviors make it easy to architect for whole sitedelivery.Self service signup and configuration via AWS ManagementConsole and APIs.
  • 31. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.CloudFront can make your web applications…….FasterScale BetterMore AvailableEasier to ManageCost Less
  • 32. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Cost Less: How CloudFront HelpsSame price for dynamic and static content!Preferential pricing on origin fetches from S3 and EC2. NEW!CloudFront is less expensive than AWS Data Transfer, over 10 TB/mth.Reserved Capacity Pricing for reduced rates with commitment.
  • 33. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Configuring CloudFront for Whole Site DeliveryDemo
  • 34. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Demo
  • 35. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Demo
  • 36. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Demo
  • 37. © 2011 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in whole or in part without the express consent of Amazon.com, Inc.Questions?