Optimizing Web Application Performance in China with AWS CloudFront and ICP Registration

AWS China Overview

If you serve users in the People's Republic of China PRC, consider using local infrastructure provided by AWS to enhance your web application performance and avlability. The local infrastructure can significantly reduce latency for Chinese users, making it a critical factor when optimizing user experience.

CloudFront China

AWS offers CloudFront China, which allows you to deploy your web applications in the PRC with enhanced performance. This service utilizes the two AWS regions within China operated by Nanguo Xiyun Data Co., Ltd NWCD. The infrastructure for CloudFront China is distinct from that of CloudFront Global and operates indepently.

To get started using CloudFront China, you must obtn an internet content provider ICP备案 for your domn name through the Chinese authorities, like example.cn. It's important to note that default CloudFront domns *cloudfront.cn cannot be used directly to serve content. Instead, you'll add an alias or CNAME pointing to your CloudFront China distribution and use this in your application URLs.

CloudFront China is based on a similar software stack as CloudFront Global but offers different functionalities due to infrastructure isolation concerns like AWS WAF's feature parity and services like Lambda@Edge and Origin Shield not being avlable. When designing applications using CloudFront China, ensure you understand these differences in functionality between the two partitions.

To get started with CloudFront China, follow this guide that walks you through deploying a CloudFront China distribution using an S3 origin hosted in the AWS China Beijing region utilizing AWS Cloud Development Kit CDK.

Common Use Cases

Enhancing Performance from China to CloudFront Global

When your global web application serves users across the world and is looking to expand into the PRC without establishing a new domn for ICP registration, you can use CloudFront Global to route traffic through nearby PoPs in locations like Hong Kong that are geographically close to the PRC.

To enhance the performance of your web applications for Chinese users using this method:

1. Purchase Zenlayer services from AWS Marketplace and configure them to target your global CloudFront distribution outside China e.g., www.example.com. You'll receive a Chinese IP address for example, 1.2.3.4 that will benefit from Zenlayer's dedicated international lines IPLCs.

2. Modify the existing www record in AWS Route 53 Global’s public hosted zone and set it with a location routing policy pointing to your global CloudFront distribution as the default option.

3. Set up an alias or CNAME for your Chinese domn that points back to this setup.

Replicating Source Infrastructure in China

For optimal performance and avlability, consider deploying your web application using a dedicated .cn domn hosted by AWS's China region with CloudFront serving content from either one of the three avlable sources provided by the ICP. To learn how to replicate source infrastructure within China, check this blog.

Optimizing Traffic Routing

To optimize traffic routing between global and Chinese deployments, follow the reference architecture presented in this blog that demonstrates best practices for managing load distribution across regions.

For more information on AWS:

• What is AWS?

• Cloud computing fundamentals

• AWS Inclusivity, Diversity Equity initiatives

• What's DevOps?

• Understanding contners

• Data lake concept

• AWS cloud security aspects
  This article is reproduced from: https://aws.amazon.com/developer/application-security-performance/articles/content-delivery-in-china/

Please indicate when reprinting from: https://www.ub52.com/Housekeeping_nanny/CloudFront_CN_1234.html