Layer 3 level
- TCP vs UDP
- Do we need any UDP at all ? NTP/DNS ?
- Open Ports 443, 80, 25, 465, 587, 2525
Known Problem:
- ELBs don't scale very fast. What happens during DDoS?
Mitigations by AWS
- Route53 monitors health of ELB instances and if it is fails because DDoS targetting particular instance, it will remove it from pool, good traffic continues.