4

I'm new to AWS. I have deployed an interface endpoint in two subnets of my VPC. The endpoint comes with three domain names.

vpce-xxxxxxxxxxxxxxx-yjkfe3jc.vpce-svc-xxxxxxxxxxxxxxx.eu-central-1.vpce.amazonaws.com (Z273ZU8SZ5RJPC)
vpce-xxxxxxxxxxxxxxx-yjkfe3jc-eu-central-1a.vpce-svc-xxxxxxxxxxxxxxxx.eu-central-1.vpce.amazonaws.com (Z273ZU8SZ5RJPC)
vpce-xxxxxxxxxxxxxxx-yjkfe3jc-eu-central-1b.vpce-svc-xxxxxxxxxxxxxx.eu-central-1.vpce.amazonaws.com (Z273ZU8SZ5RJPC)

Two of them, which have the availability zone name inside their name, apparently points to the IP addresses of the ENIs in the subnets. However, I'm wondering what's the purpose of the first record(the one without AZ name)? And where are these records hosted or where to find the zone Z273ZU8SZ5RJPC?

Thanks!

aaronzhaocr
  • 53
  • 1
  • 6

1 Answers1

4

First One is the regional DNS name of the endpoint, which will resolve to all the available zonal IP addresses associated with the endpoint.

[] Interface VPC endpoints (AWS PrivateLink) - Access a service through an interface endpoint - https://docs.aws.amazon.com/vpc/latest/privatelink/vpce-interface.html#access-service-though-endpoint

If you have created a HA architecture, with multiple resources spanning across multiple AZs, then the regional endpoint can be used. A simpler example can be for load balancing, where you are distributing load across multiple AZs using Round-Robin DNS resolution.

Since the hosted zone is not visible in our own account, it must be something AWS managed and therefore, we cannot see the records present in it.

Arpit Agarwal
  • 131
  • 7
  • 1
    Using the regional endpoint will round robin the AZ's, meaning it will be charged for cross AZ data transfer. Doesn't it make more sense to use thee correct AZ endpoint according to the AZ you are currently running on? (even if you have multiple replicas on multiple AZ's, each one can still "choose" the right one) – yogi Feb 15 '22 at 09:50
  • 1
    Yeah Yuval, we can do that and that is why AZ wise DNS is also provided. However this depends on how fault tolerant you want your application. AZ failures can impact the availability in a specific AZ, and at that time you might want your traffic to switch to other AZ. – Arpit Agarwal Feb 16 '22 at 10:23