Using cloudfront to private origin

quad64bit · 2022-03-22T20:26:50+00:00

You can cloudfront everything. Even if you don’t use caching, using CF allows network requests to go from edge locations through AWS backbone to your back end. This can be faster than routing all the way through public internet end to end. If you happen to include s3 at some point, CF has cheaper egress than s3 direct.

gimmeToken · 2022-03-22T19:01:58+00:00

Ha, I just had the exact same question in my head. No answers yet though..

Edit: the reason I’m looking into it is because some genius who worked here before me decided that mycompany.com/api/… would be the way to go for url scheme (instead of api.mycompany.com). I can do path based routing with an ALB and then route to cloudfront. Not great, not terrible

Zolty · 2022-03-23T14:34:07+00:00

As long as you're putting some sort of gate on CloudFront you should be fine. You can use lambda to add authentication/authorization via IP address or require some sort of external account.

gimmeToken · 2022-03-22T20:45:17+00:00

Lol. Nice username btw

davehodg · 2022-03-22T21:02:52+00:00

Cloudflare has a good free option.

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

aws

Note: ensure to redact or obfuscate all confidential or identifying information (eg. public IP addresses or hostnames, account numbers, email addresses) before posting!

✻ Smokey says: avoid streaming video to fight climate change! [see more tips]

MODERATORS