Slashdot Mirror

← Back to Stories (view on slashdot.org)

AWS Load Balancer Sends 2 Million Netflix API Reqs To Wrong Customer

Posted by Soulskill on from the close-does-not-in-fact-count dept.

rsk writes "Amazon Web Services' Elastic Load Balancer is a dynamic load-balancer managed by Amazon. Load balancers regularly swapped around with each other which can lead to surprising results; like getting millions of requests meant for a different AWS customer. Using ELBs can result in AWS unintentionally introducing a man-in-the-middle (attack) into your application environment. Most AWS users do not realize this can happen and have not secured against it."

1 of 58 comments (clear)

  1. Re:Why no proxy? by TooMuchToDo · · Score: 1, Insightful

    On top of that, their "Elastic Load Balancer" (just another bullshit "cloud" marketing term for their cluster of F5 load balancers at each availability zone) is just, as I mentioned, an array of F5 load balancers. They either a) don't support the functionality OP is speaking about, or, more likely, Amazon chooses not to support handling traffic in that way to simply operations.