Workshop shop

Session (Redis)

session 3bad9200b5b4 · created 2026-10-14 22:03:46 UTC · requests in this session 1 · cart 0 item(s)

last pages: /

answered by:

web i-00b75f526467104bd on-demand us-east-1b · t3.micro

app i-0a375bddeddd61dbe on-demand us-east-1b · t3.micro

global counter (Redis INCR, all instances): 56441

40 categories · 50,000 products · 200,000 reviews · 300,000 orders

source: RDS PostgreSQL · 56.3 ms · reload without Redis · reload

Instances that wrote to /mnt/efs (On-Demand and Spot):

i-0a375bddeddd61dbe us-east-1b · on-demand · t3.micro · last request 22:03:46 UTC
i-0c1ac3f5aa670b9ed us-east-1a · on-demand · t3.micro · last request 21:43:39 UTC

Media gallery: files on EFS, served by any app instance, cached by CloudFront under /media/*.

The app instance opens the connection: NAT GW → firewall (TLS SNI allowlist) → IGW.

Connection	Between	src → dst	Seen by
Con-A	browser ↔ DNS (Route 53)	`UDP/53 via the browser's resolver`	not visible to the server
Con-B	browser ↔ CloudFront	`216.73.216.188:45770 → CloudFront edge :443`	CloudFront-Viewer-Address · CloudFront terminates, WAF evaluated
Con-C	CloudFront ↔ S3 /static/*	`CloudFront → S3 (OAC)`	cache miss only, not visible here
Con-D	CloudFront ↔ ALB	`130.176.119.211:? → ALB public IP :443 (IGW DNAT → 10.20.4.56)`	X-Forwarded-For · IGW edge RT → FW endpoint → ALB
Con-E	ALB ↔ nginx (web)	`10.20.4.56:3278 -> 10.20.12.9:80`	nginx $remote_addr:$remote_port
Con-F	nginx ↔ internal ALB	`10.20.12.9:? → 10.20.16.141:80`	X-Forwarded-For (nginx source port not exported)
Con-G	internal ALB ↔ app	`10.20.16.141:11734 → 10.20.22.188:8080`	gunicorn socket
Con-H	app ↔ Redis	`10.20.22.188:48418 → 10.20.31.6:6379`	CLIENT INFO addr → laddr
Con-I	app ↔ RDS PostgreSQL	`10.20.22.188:48194 → 10.20.31.243:5432`	inet_client_addr() / inet_server_addr()
Con-J	app ↔ EFS (NFS)	`10.20.22.188:41910 → 10.20.32.152:2049`	ss -tn dport 2049