Skip to content

Instantly share code, notes, and snippets.

@amywieliczka

amywieliczka/cloudfront-distros.md

Last active July 5, 2023 20:58
Show Gist options
  • Save amywieliczka/de47f9f832035f29529bde2745894c41 to your computer and use it in GitHub Desktop.
Save amywieliczka/de47f9f832035f29529bde2745894c41 to your computer and use it in GitHub Desktop.
Download ZIP
DSC CloudFront Distros
Raw
cloudfront-distros.md

Cloudfront Distributions in DSC AWS Account

Distro ID Description Alternate Domain Names Last Modified Date
E1RSO6N0RTXH8X calisphere.org calisphere.org July 3, 2023 at 8:19:58 PM UTC
EA4P9EMQ9TNK0 calisphere-test.cdlib.org calisphere-test.cdlib.org May 24, 2023 at 5:24:22 PM UTC
E215A3D7QO74OG this may not be needed thumbnails.calisphere.org May 16, 2023 at 11:45:55 PM UTC
E2U9T45UP3ZOJ8 real IIIF June 1, 2022 at 4:29:03 PM UTC
E2BKF7XHHT31S3 legacy OAC video av-cdn.calisphere.org December 8, 2021 at 7:46:23 PM UTC
E1HBH81MROL4M5 legacy redirect www.calisphere.cdlib.org, calisphere.cdlib.org December 8, 2021 at 7:45:03 PM UTC
E1WK69P33URL5F production CDN for OAC Production cdnl.calisphere.org, cdn.calisphere.org December 8, 2021 at 7:39:39 PM UTC
E36KKUQ9XBLIYR ucldc-nuxeo-ref-media December 8, 2021 at 7:34:12 PM UTC
E1XYUSAVQY1FHH OAC dev cdnl-dev.calisphere.org November 15, 2021 at 4:24:35 PM UTC
E39BX27JPP2525 OAC stage cdnl-stg.calisphere.org November 15, 2021 at 4:24:00 PM UTC
EAR6IIB2ZYVQU main OAC oac.cdlib.org November 15, 2021 at 4:22:23 PM UTC
EFYNVC47PVHZK Cloudfront on registry to test custom errors July 29, 2019 at 9:41:42 PM UTC
E3PGBOVLVAXLNQ pdf var/logs/pdf.oac. pdf.oac.cdlib.org July 17, 2013 at

Cloudfront "production CDN for OAC" distro E1WK69P33URL5F

Origin: (redirects to cdlib.org)

origin name origin domain origin path origin type protocol https port http port
Custom-dsc-origin.cdlib.org dsc-origin.cdlib.org Custom Origin http-only 443 80

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 Default (*) Custom-dsc-origin.cdlib.org HTTP and HTTPS

Affiliated Domain Names

https://d3o89kvaqijph7.cloudfront.net, cdnl.calisphere.org, cdn.calisphere.org, dsc-origin.cdlib.org

Do we care about any of these?

Origin Encryption Notes:

The origin dsc-origin.cdlib.org is somewhere set up to redirect to http://www.cdlib.org/. This cloudfront distro & dsc-origin.cdlib.org domain & dsc-origin.cdlib.org configuration somewhere establish a redirect for cdnl.calisphere.org and cdn.calisphere.org to redirect to cdlib.org.

No idea where dsc-origin.cdlib.org configuration is located or how to set up an SSL cert for dsc-origin.cdlib.org.

Cloudfront "OAC dev" distro E1XYUSAVQY1FHH

Origin: (redirects to cdlib.org)

origin name origin domain origin path origin type protocol https port http port
Custom-dsc-origin-dev.cdlib.org dsc-origin-dev.cdlib.org Custom Origin http-only 443 80

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 Default (*) Custom-dsc-origin-dev.cdlib.org HTTP and HTTPS

Affiliated Domain Names:

https://dkjpngjyq3bfn.cloudfront.net, cdnl-dev.calisphere.org, dsc-origin-dev.cdlib.org

Do we care about any of these?

Origin Encryption Notes:

The origin dsc-origin-dev.cdlib.org is somewhere set up to redirect to http://www.cdlib.org/. This cloudfront distro & dsc-origin-dev.cdlib.org domain & dsc-origin-dev.cdlib.org configuration somewhere establish a redirect for cdnl-dev.calisphere.org to redirect to cdlib.org.

No idea where dsc-origin-dev.cdlib.org configuration is located, or how to set up an SSL cert for dsc-origin-dev.cdlib.org.

Cloudfront "OAC stage" distro: E39BX27JPP2525

Origin: (redirects to cdlib.org)

origin name origin domain origin path origin type protocol https port http port
Custom-dsc-origin-stg.cdlib.org dsc-origin-aws-stg.cdlib.org Custom Origin http-only 443 80

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 Default (*) Custom-dsc-origin-stg.cdlib.org HTTP and HTTPS

Affiliated Domain Names:

https://d3ouio3td1lc5e.cloudfront.net, cdnl-stg.calisphere.org, dsc-origin-aws-stg.cdlib.org

Origin Encryption Notes:

The origin dsc-origin-aws-stg.cdlib.org is somewhere set up to redirect to http://www.cdlib.org/. This cloudfront distro & dsc-origin-aws-stg.cdlib.org domain & dsc-origin-aws-stg.cdlib.org configuration somewhere establish a redirect for cdnl-stg.calisphere.org to redirect to cdlib.org.

No idea where dsc-origin-aws-stg.cdlib.org configuration is located or how to set up an SSL cert.

Cloudfront "this may not be needed" distro: E215A3D7QO74OG

  • Distribution domain name: https://d12st13wriz4j5.cloudfront.net
  • Last modified: December 8, 2021 at 7:39:04 PM UTC
  • Alternate domain names: thumbnails.calisphere.org
  • Custom SSL certificate: *.calisphere.org

Origin:

origin name origin domain origin path origin type protocol https port http port
Custom-thumbwest-env.elasticbeanstalk.com thumbwest-env.elasticbeanstalk.com Custom Origin http-only 443 80

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 Default (*) Custom-thumbwest-env.elasticbeanstalk.com HTTP and HTTPS

Affiliated Domain Names:

https://d12st13wriz4j5.cloudfront.net, thumbnails.calisphere.org, thumbwest-env.elasticbeanstalk.com

Origin Encryption Notes:

The origin thumbwest-env.elasticbeanstalk.com is our thumbnail server. This makes our thumbnails available at thumbnails.calisphere.org. This same origin is also used in our Calisphere and Calisphere-test distributions (though this thumbnails.calisphere.org URL is not). Apparently some UC Irvine website is using thumbnails.calisphere.org as a thumbnail server https://trello.com/c/vP1NDKnR/410-csphere-image-thumbnail-link-update-from-https-thumbnailscalisphereorg-https-calisphereorg, https://www.lib.uci.edu/sites/all/plodab/index.php

Cloudfront "legacy redirect" distro E1HBH81MROL4M5

Origin:

origin name origin domain origin path origin type protocol https port http port
S3-www-calisphere-redirect-bucket www-calisphere-redirect-bucket.s3-website-us-west-2.amazonaws.com Custom Origin http-only 443 80

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 Default (*) S3-www-calisphere-redirect-bucket HTTP and HTTPS

Origin Encryption Notes:

The origin www-calisphere-redirect-bucket s3 bucket contains no objects. Under bucket properties, static website hosting is enabled, the hosting type is "Redirect request". The Target website address is calisphere.org. The protocol (for the redirect target?) is https. The bucket website endpoint is "http://www-calisphere-redirect-bucket.s3-website-us-west-2.amazonaws.com".

Effectively, this cloudfront distro & s3 bucket establish a redirect for www.calisphere.cdlib.org and calisphere.cdlib.org to calisphere.org.

While an s3 origin seems to be magically encrypted, this is actually a custom origin that happens to exist at a bucket-as-static-site s3 bucket. We cannot get an SSL cert for www-calisphere-redirect-bucket.s3-website-us-west-2.amazonaws.com. Switching the origin to an s3 origin loses the bucket-as-static-site redirect properties.

I don't know how we want to move forward with encrypting the origin for this distro.

Cloudfront "real IIIF" distro: E2U9T45UP3ZOJ8

  • Distribution domain name: https://d30821mshh5k7n.cloudfront.net
  • Last modified: June 1, 2022 at 4:29:03 PM UTC
  • No alternate domain names
  • No custom SSL certificate
  • Ultimately provides a cache to our IIIF server

Origin:

origin name origin domain origin path origin type protocol https port http port
Custom-pottoloris-env-1.elasticbeanstalk.com eb-potto-loris2.us-west-2.elasticbeanstalk.com Custom Origin http-only 443 80

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 Default (*) Custom-pottoloris-env-1.elasticbeanstalk.com HTTP and HTTPS

Origin Encryption Notes:

The origin eb-potto-loris2.us-west-2.elasticbeanstalk.com is our IIIF image server. This makes our IIIF server available at https://d30821mshh5k7n.cloudfront.net (which is subsequently used as an origin in the Calisphere and Calisphere-test distributions.)

Cloudfront "legacy OAC video" distro: E2BKF7XHHT31S3

  • Distribution domain name: https://d1kpbc66j2ghwa.cloudfront.net
  • Last modified: December 8, 2021 at 4:29:03 PM UTC
  • Alternate domain names: av-cdn.calisphere.org
  • No custom SSL certificate
  • Getting an access denied error when trying to access the distro

Origin:

origin name origin domain origin path origin type protocol https port http port
S3-calisphere_video calisphere_video.s3.amazonaws.com S3

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 Default (*) S3-calisphere_video HTTP and HTTPS

Origin Encryption Notes:

Access Denied Errors

Cloudfront "main OAC" distro: EAR6IIB2ZYVQU

  • Distribution domain name: https://d1m5c2fs56izk5.cloudfront.net
  • Last modified: November 15, 2021 at 4:22:23 PM UTC
  • Alternate domain names: oac.cdlib.org
  • Custom SSL certificate: oac.cdlib.org

Origin:

origin name origin domain origin path origin type protocol https port http port
S3-static.ucldc.cdlib.org/robots/open static.ucldc.cdlib.org.s3.amazonaws.com /robots/open-oac S3 - - -
S3-static.ucldc.cdlib.org/robots/closed static.ucldc.cdlib.org.s3.amazonaws.com /robots/closed S3 - - -
Custom-oac.cdlib.org oac-upstream.cdlib.org Custom origin http-only 443 80
Custom-oac2-prd.cdlib.org oac-upstream.cdlib.org Custom origin http-only 443

Behavior:

precedence Path Pattern Origin or origin group Viewer protocol policy
0 robots.txt S3-static.ucldc.cdlib.org/robots/open HTTP and HTTPS
1 /contact/* Custom-oac2-prd.cdlib.org Redirect HTTP to HTTPS
2 /ents/* Custom-oac.cdlib.org HTTP and HTTPS
3 /search Custom-oac2-prd.cdlib.org Redirect HTTP to HTTPS
4 Default (*) Custom-oac2-prd.cdlib.org Redirect HTTP to HTTPS

Origin Encryption Notes:

Not sure where oac-upstream.cdlib.org is

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment