Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reduce public ip count #118

Open
TheSkorm opened this issue Aug 2, 2023 · 4 comments
Open

Reduce public ip count #118

TheSkorm opened this issue Aug 2, 2023 · 4 comments

Comments

@TheSkorm
Copy link
Member

TheSkorm commented Aug 2, 2023

AWS will be charging for public IPv4 addresses soon (https://aws.amazon.com/blogs/aws/new-aws-public-ipv4-address-charge-public-ip-insights/)

image

We currently use 6 IP addresses @ $0.005 per hour = ~$22 USD a month

Not mentioned in the article is LightSail, for we'll deal with that separately

Of these 6:

  • 2x for ALB used for websockets, predictions and grafana
    • We might be able to switch this load balancer to V6 only and add a cloudfront distribution for each host header - special care will have to happen with websockets. Otherwise we can probably set this all to not cache
    • We will need to make sure users on v4 can access these endpoints via cloudfront
  • 1x for Websocket main instance
  • 1x for tawhiri
  • 1x for grafana
  • 1x for APRS gateway

The ECS services could likely switch to IPv6 using egress gateway. They don't permit direct traffic (or shouldn't anyway). The only tricky one is the APRS gateway, however I believe there is enough APRS-IS gateways that support IPv6 that this shouldn't be an issue.

@TheSkorm
Copy link
Member Author

TheSkorm commented Aug 4, 2023

IPV6 public and private subnets created. Other subnets are now dualstack

@TheSkorm
Copy link
Member Author

TheSkorm commented Aug 4, 2023

OpenSearch doesn't support IPv6 so unless we do something wild like proxy requests through CloudFront grafana will have to remain having a v4 address

@TheSkorm
Copy link
Member Author

Can't do a lot until : aws/containers-roadmap#1340 and opensearch have IPv6 options

@TheSkorm
Copy link
Member Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant