Rule: Auto Scaling Groups with a Load Balancer Should Use Health Checks
This rule ensures that Auto Scaling groups with a load balancer utilize health checks for optimal performance.
| Rule | Auto Scaling groups with a load balancer should use health checks |
| Framework | Federal Financial Institutions Examination Council (FFIEC) |
| Severity | ✔ Critical |
Rule Description:
Auto Scaling groups with a load balancer must implement health checks that comply with the Federal Financial Institutions Examination Council (FFIEC) requirements. Health checks ensure the availability and proper functioning of the instances behind the load balancer. This rule helps to maintain the stability and reliability of the system.
Troubleshooting Steps:
- 1.
Verify Load Balancer Configuration:
- Check if the Auto Scaling group is associated with a load balancer.
- Validate that the load balancer health check settings comply with FFIEC requirements.
- 2.
Examine Auto Scaling Group Configuration:
- Verify that the Auto Scaling group has the desired number of instances to meet the traffic demands.
- Ensure that the instances are correctly registered with the load balancer.
- 3.
Check Health Check Settings:
- Validate the health check settings for the load balancer:
- Confirm the interval at which health checks are performed.
- Verify the response timeout duration.
- Ensure the threshold for unhealthy instances is appropriately configured.
- Validate the health check path or script to be compliant with FFIEC guidelines.
- 4.
Review Instance Status:
- Check the status of instances associated with the Auto Scaling group.
- Verify that instances are reachable and not experiencing any issues.
- Identify any instances that have failed the load balancer health checks.
Code (if applicable):
There is no specific code provided for this rule. Implementation varies depending on the cloud platform and tools being used for Auto Scaling groups and load balancers.
Remediation Steps:
- 1.
Verify Load Balancer Configuration:
- Log in to your cloud provider's management console.
- Navigate to the load balancer configuration page.
- Review the load balancer associated with the Auto Scaling group.
- 2.
Examine Auto Scaling Group Configuration:
- Navigate to the Auto Scaling group configuration page.
- Validate the desired capacity and minimum/maximum number of instances.
- Ensure instances are registered with the load balancer.
- 3.
Check Health Check Settings:
- Locate the health check settings for the load balancer.
- Confirm the interval at which health checks are performed (recommended: every 30 seconds or less).
- Adjust the response timeout duration (recommended: 5 seconds or less).
- Set an appropriate threshold for unhealthy instances (recommended: less than 100%).
- 4.
Review Instance Status:
- Check the instance status in the Auto Scaling group.
- Identify any instances that are unhealthy or not registered with the load balancer.
- Troubleshoot and resolve any issues with unhealthy instances:
- Check the system logs and application logs to identify the cause.
- Utilize cloud provider or third-party monitoring tools to gather more information.
- If necessary, terminate and replace unhealthy instances with new ones.
Note: The above steps are generic guidelines, and the actual remediation process may vary based on the cloud provider and specific configuration.
By following these steps, you can ensure that your Auto Scaling groups with load balancers implement health checks that comply with the FFIEC requirements, enabling the system to maintain optimal availability and performance.