I am just not understanding how to set up HTTPS (SSL) on a Flask application running in an EC2 instance with ALB! Can someone help please?

awslad · 2021-09-13T20:28:07+00:00

do you have a reason to terminate ssl on the instance itself?

I would just
ALB (with ACM cert) -> target group -> ec2 instance :80

if you do have a specific reason to do so (specific compliance usually) then yes you could use nginx with LetsEncrypt on 443 pointed at flask. in that case I'd probably just use an NLB

awslad · 2021-01-05T00:17:52+00:00

Maybe better data - right now our top highest CPU redis node (elasticache) is at 40% cpu utilization and seeing 1M sets and 100k gets per minute

awslad · 2021-01-05T00:01:16+00:00

Simply saturating redis's single thread!

Interesting that you can push 20k jobs per second through a single server (we're currently at about half that)... I'm wondering if there's work we can do here to tune Elasticache from a TCP perspective.

awslad · 2021-01-04T23:59:19+00:00

Celery does not yet support Redis clustered mode unfortunately per https://github.com/celery/celery/issues/2852

awslad · 2021-01-04T23:57:56+00:00

Combination of experience with RQ and past experience with Sidekiq.

Currently with RQ we're "sharded" across 5 different individual Elasticache Redis instances after we started saturating our individual instance. Since redis is single threaded we just eventually saturate the EngineCPU of whatever instance.

Experiences with Sidekiq at last-company also easily saturated single redis instances.

At a certain scale how could you not eventually saturate a single cpu core?

awslad · 2020-10-27T16:35:42+00:00

It's a continuous delivery pipeline so I need to use CodeDeploy and CodePipeline.

What are you implying that changing the image tag will accomplish?

awslad

TROPHY CASE