Difference between global and regional IP addresses in AWS CloudFront

user_2996867 0
Viewed 425

AWS publishes a list of CloudFront's IP addresses (taken from AWS documentation). It contains a JSON document with 2 keys:

  • CLOUDFRONT_GLOBAL_IP_LIST
  • CLOUDFRONT_REGIONAL_EDGE_IP_LIST

What's the difference between these lists (global and regional)?

  • Which IPs are hit when the web-client accesses a CloudFront distribution: global or regional edge ones?
  • Which IPs do actually hit your origin (e.g. with CachingDisabled cache policy, etc.)?
amazon-cloudfront amazon-web-services
1 Answers

CloudFront (CF) has two types of caches:

  • Edge caches - this is the first level of caching layer for CF. This is the layer most people are familiar with and consider when working with CF.
  • Regional caches - this is the second level, between your origin and CF distro. If edge caches have a miss, AWS can check regional cashes for your data, before going directly to your origin.

So your origin can get hit from both IP ranges.

user_2488230
Related