Adjusting distribution policies can concentrate traffic on specific nodes causing DoS or redirect flows through unwanted paths.
Traffic Distribution Is Manipulated
CCC.LB.TH03
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.LB.CP01 | Static Load Balancing | The service can employ load balancing algorithms that follow fixed rules, such as round robin, independent of the current server state. |
| CCC.LB.CP02 | Dynamic Load Balancing | The service can employ load balancing algorithms that consider the current state of servers before distributing traffic, adjusting the distribution in real time based on server health, resource utilization, and traffic conditions. |
| CCC.LB.CP20 | Traffic Splitting / Weighted Routing | The service can distribute incoming traffic across multiple backend resources based on predefined weights or percentages, for example for canary, A/B, blue-green, or gradual traffic migration deployments. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.LB.CN19 | Alert on Traffic Distribution Changes | Ensure that changes to how traffic is distributed across targets are published so that they cannot occur unobserved. |