12 comments

[ 2.7 ms ] story [ 40.2 ms ] thread
What's really interesting is that you can capture amazon-dns traffic. This is gold for security purposes.
Oh interesting. Could you use this to test a system using live traffic before a release?
I'm pretty sure you could. You could mirror your live traffic to a test, but that's generally a bad idea. You have to make sure no data gets out of your test system either towards the client or towards the database. Gotta be real careful when mirroring real traffic.

Of course, using it to capture raw requests and replaying them would be a decent use case.

It's about time. Finally, IDS/Session monitoring that is external to the hosts one is monitoring.
Slightly off-topic:

Amazon Polly breathing in drives me nuts.

I know, it hasn't improved since they launched it. I feel like an hour or two tweaking it could make it sound fine. I can't believe someone listened to that and said, ya, that sounds really good, let's launch it.

Maybe they were using Christopher Reeves as the voice model.

This looks really useful. I think you can now offer a full intrusion detection service as a marketplace service on AWS with minimal configuration.
I wonder if this could be used for high availability between two ec2 instances (vrrp/hsrp style)
VPCs would need to support multicast for VRRP to be an option.
There are unicast options for VRRP