Networking / Loadbalancer / Controls / DEV
Alert on Traffic Distribution Changes
CCC.LB.CN19 · Observability
Ensure that changes to how traffic is distributed across targets are published so that they cannot occur unobserved.
Related Capabilities
| ID | Title | Description |
|---|
| CCC.LB.CP01 | Static Load Balancing | The service can employ load balancing algorithms that follow fixed rules, such as round robin, independent of the current server state. |
| CCC.LB.CP02 | Dynamic Load Balancing | The service can employ load balancing algorithms that consider the current state of servers before distributing traffic, adjusting the distribution in real time based on server health, resource utilization, and traffic conditions. |
| CCC.LB.CP20 | Traffic Splitting / Weighted Routing | The service can distribute incoming traffic across multiple backend resources based on predefined weights or percentages, for example for canary, A/B, blue-green, or gradual traffic migration deployments. |
Related Threats
| ID | Title | Description |
|---|
| CCC.LB.TH03 | Traffic Distribution Is Manipulated | Adjusting distribution policies can concentrate traffic on specific nodes causing DoS or redirect flows through unwanted paths. |
Assessment Requirements
| ID | Text | Applicability |
|---|
| CCC.LB.CN19.AR01 | When the distribution algorithm or the routing weights of a listener rule are changed, the service MUST publish an event to a monitored channel which includes the client identity, time, and new distribution settings. | tlp-green, tlp-amber, tlp-red |