Interactive network flow, edge delivery, and transfer-cost tracing
Draw direction, bytes, boundaries, intermediaries, DNS/front-door choice, and processing before optimizing network cost. Choose DNS routing, CloudFront, or Global Accelerator from protocol, cacheability, static-entry, latency, resilience, and origin-offload requirements.
LESSON GOALS
By the end, you can
- Draw direction, bytes, boundaries, intermediaries, DNS/front-door choice, and processing before optimizing network cost.
- Choose DNS routing, CloudFront, or Global Accelerator from protocol, cacheability, static-entry, latency, resilience, and origin-offload requirements.
01
Draw Every Traffic Leg
Network optimization starts with a directional ledger. For each flow, record source and destination, protocol, public or private address, bytes in each direction, request count, Availability Zone and Region boundaries, account ownership, and every intermediary. A response can be much larger than its request, so collapsing directions hides the dominant charge. Preserve required multi-AZ resilience before attempting same-AZ placement. Then identify which hops perform processing—load balancer, NAT, Transit Gateway, endpoint, accelerator, or CDN—and which merely select an address. Apply compression, aggregation, caching, or co-location only after the exact path is visible. A route that avoids one processing service can introduce cross-AZ transfer elsewhere. The ledger should include failure paths as well as normal paths because traffic may shift Regions or traverse a different AZ during an outage. Use current service pricing for rates; the durable skill is multiplying each dated rate by the correct directional quantity without assuming that AWS-to-AWS traffic is free.
02
Choose Front Door And Load Balancer
Route 53 answers DNS queries according to routing and health policy; it does not cache application payloads or provide a fixed application anycast address. CloudFront serves HTTP content through edge caches and can reduce origin requests and bytes when cache behavior is correct. Global Accelerator routes non-cacheable TCP or UDP traffic through static anycast entry to healthy endpoints and does not store objects. At the Regional front door, ALB provides HTTP and HTTPS Layer 7 routing, NLB provides Layer 4 transport including TCP and UDP with static-address use cases, and GWLB integrates virtual appliance fleets for inline inspection. These three ELB types are functional alternatives only when their protocol role matches. Current ELB billing includes load-balancer hours and type-specific capacity units, so compare traffic characteristics, processed bytes, connections or rules as applicable, and target fleet cost. ALB and NLB health behavior also affects routing: test registered-target health and application response rather than treating DNS reachability as success.
03
Optimize Cache And Health
For cacheable downloads, estimate edge hit ratio by object and byte volume, not just request count. A high hit ratio can lower origin transfer and compute, while fragmented cache keys, short TTLs, or uncacheable personalization can erase that benefit. Include CloudFront requests, security or edge processing, invalidations, origin misses, and compression. For a dynamic non-HTTP control flow requiring stable entry addresses, Global Accelerator may justify its additional path charges; it loses if DNS steering alone meets failover and clients accept changing addresses. Health tests should exercise an unhealthy target, an empty target group, and an origin outage. A load balancer can route traffic while the application still fails, and documented fail-open conditions require degraded-path reasoning rather than a simplistic no-route answer. Track target health, response codes, connection errors, origin latency, cache status, and bytes at each boundary. The preferred design reduces total valid cost while preserving protocol, security, static-entry, latency, and resilience constraints. If the media later becomes private and uncacheable, direct origin or accelerator economics must be recalculated rather than inheriting the old CDN choice.
DECISION TABLE
Compare the architecture constraints
| requirement | choose | because | reject |
|---|---|---|---|
| cacheable HTTP offload | CloudFront | edge cache fits | Global Accelerator |
| noncacheable TCP/UDP static IP | Global Accelerator | anycast routing | CloudFront |
| DNS policy | Route 53 | answer selection | payload cache |
| HTTP host/path | ALB | L7 routing | NLB |
GUIDED WORKED SCENARIO
Reason from the stated constraints
This is a guided example, not a question to memorise. The knowledge check uses new situations to test the same reasoning.
A global service sends 10 TB/day of cacheable media and a noncacheable UDP control stream; media origin is overloaded and partners require static IPs for UDP.
Requirements
- Media is HTTP/cacheable
- UDP is noncacheable
- UDP needs static entry
- Origin load must fall
Reasoning path
- For Interactive network flow, edge delivery, and transfer-cost tracing, eliminate any candidate that violates the explicit security or failure/performance dimension.
- Quantify the scale, operating burden, and complete cost horizon specific to Interactive network flow, edge delivery, and transfer-cost tracing before ranking valid choices.
- Select the lowest-total-cost valid design for Interactive network flow, edge delivery, and transfer-cost tracing, then change one decisive constraint and re-evaluate the loser.
Why it wins
- Each front door matches protocol/cache
- Origin bytes and processing fall
- Static UDP entry is preserved
Why the alternatives lose
It is HTTP content delivery, not raw UDP
Becomes correct when: Traffic is cacheable HTTPIt does not cache/offload objects
Becomes correct when: Traffic is noncacheable and static anycast mattersNo payload cache or fixed accelerator behavior
Becomes correct when: DNS policy is the only requirementARCHITECTURE VISUAL · TEXT MODE
Inspect the model
For Interactive network flow, edge delivery, and transfer-cost tracing, read a keyboard-ordered table of requirements, quantities, candidate path or service, first failed constraint, repair, winner, and changed-constraint result; animation and color are unnecessary.
saa-viz-network-path-lab · saa-viz-cost-transfer-labKNOWLEDGE CHECK
Answer one question at a time
Pass every question to complete this lesson. Each answer includes reasoning before you continue.
Media becomes noncacheable while static anycast entry is required. Which edge choice now handles that branch?
Reveal reasoning
Global Accelerator replaces CloudFront for that media branch because transport routing now matters and cache offload no longer applies.
A bill review counts only one outbound transfer line for a CloudFront miss that reaches an ALB and target. What should the path ledger expose?
Reveal reasoning
Expose each directional transfer or processing leg, the cache miss, request charges, and applicable ELB hour/capacity-unit dimensions without assuming one line item.
Before reveal, predict the first failed gate when the UDP control stream is sent to CloudFront despite valid DNS.
Reveal reasoning
The service protocol/capability gate fails before target health; route UDP through Global Accelerator instead.
PRIMARY SOURCES
Verify the claims
- primaryOverview of Data Transfer Costs for Common Architecturesaws-architecture-data-transfer-costs · retrieved 2026-07-30
- primaryWhat is Amazon CloudFront?aws-net-cloudfront · retrieved 2026-07-29
- primaryWhat is AWS Global Accelerator?aws-net-global-accel · retrieved 2026-07-29
- primaryAmazon Route 53 Developer Guideaws-net-route53 · retrieved 2026-07-29
- primaryAmazon CloudFront CDN pricingaws-cloudfront-pricing · retrieved 2026-07-30
- primaryWhat is an Application Load Balancer?aws-elb-application-load-balancer · retrieved 2026-07-30
- primaryWhat is a Network Load Balancer?aws-elb-network-load-balancer · retrieved 2026-07-30
- primaryWhat is a Gateway Load Balancer?aws-elb-gateway-load-balancer · retrieved 2026-07-30
- primaryElb Pricingaws-elb-pricing · retrieved 2026-07-30
- primaryAlb Health Checksaws-alb-health-checks · retrieved 2026-07-30
- primaryNlb Health Checksaws-nlb-health-checks · retrieved 2026-07-30