Four things at the edge, in the wrong order
Requests arrive from the internet and reach the application. Between those two points sit a CDN, a web application firewall and a load balancer — and the order they're chained in decides both what you pay and what gets inspected.
Get it wrong and you either pay to inspect traffic a cache should have served, or you cache responses to attacks.
Chain the edge in the order a request should meet it.
Components — tap one, then tap a slot on the diagram
?Chained in the wrong order you either pay to inspect traffic a cache should have served, or cache the responses to attacks.
Boundaries, outermost first: VPC: App servers Outside every boundary: Internet, an empty slot for the first, an empty slot for the second, an empty slot for the third Connections: Internet calls first (step 1) first calls second (step 2) second calls third (step 3) third calls App servers (step 4)
Internet
App servers