amazon-web-services - 从本地开发机器使用 AWS DynamoDB DAX

Question

我正在为我目前使用 DynamoDB 的应用程序试用 DAX 客户端，发现它仅在 VPC 内受支持。 DAX 端点在 172.31.x.y 范围内。

这是否意味着无法从我的本地开发机器测试 DAX 功能，或者是否可以将 DAX 配置为可从 Internet 访问以进行测试？或者我是否坚持使用 SSH 连接到 VPC 中的 EC2？

Answer 1

答:似乎答案是否定的，我们甚至无法通过本地开发机器进行测试。

我遇到了同样的问题。在花了这么多小时挖掘视频和文档之后，我终于想我明白了。我不明白为什么亚马逊应该将其限制为仅在 VPC 中。只要客户使用他们的私钥和公钥，我不明白为什么您不能从 VPC 外部安全地访问 DAX。 (我唯一能想到的是潜在的 DDOS 攻击)。无论如何，亚马逊本可以更好地传达这一点......他们没有在任何视频中提及，我只是在一个随机文件中发现了这一点......

https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/DAX.html

Usage Notes For a list of AWS regions where DAX is available, refer to https://aws.amazon.com/dynamodb/pricing.

DAX supports applications written in Java, Node.js, .Python and .NET, using AWS-provided clients for those programming languages.

DAX does not support Transport Layer Security (TLS).

DAX is only available for the EC2-VPC platform. (There is no support for the EC2-Classic platform.)

DAX clusters maintain metadata about the attribute names of items they store, and that metadata is maintained indefinitely (even after the item has expired or been evicted from the cache). Applications that use an unbounded number of attribute names can, over time, cause memory exhaustion in the DAX cluster. This limitation applies only to top-level attribute names, not nested attribute names. Examples of problematic top-level attribute names include timestamps, UUIDs, and session IDs.

Note that this limitation only applies to attribute names, not their values. Items like this are not a problem: