A record of the adjustments made — across encoding, Lambda, CloudFront, and S3 metadata — when delivering a gigapixel-class high-resolution image (a PTIF of roughly 450MB) via Serverless IIIF on AWS Lambda.
Notes on migrating a Cantaloupe-based IIIF image server running on EC2/Docker to a serverless setup on AWS Lambda + CloudFront (serverless-iiif by Samvera).
An attempt to assign a subdomain managed by an external organization's DNS as a Cloudflare Workers custom domain hit the constraint that Cloudflare's free plan doesn't accept external subdomains as zones. The final solution was to place AWS CloudFront + WAF in front as a termination layer.
A record of blocking bot scraping against a cultural-archive site using AWS WAF, combining Geo block, IPset, JA3 fingerprint, and UA block in stages.
An implementation log of migrating a group of services running on Docker + Traefik, with no downtime, to a CloudFront + WAF-protected setup. I cover naming for the origin-only subdomain, pitfalls with shared Security Groups, the case for starting WAF in COUNT mode, cache design for SPARQL/API traffic, and other recurring decision points.
Notes on reducing cold tile fetch time from 8.8s to 0.84s on a Cantaloupe IIIF server: pyramid TIFF conversion, JVM heap tuning, and CloudFront CDN setup.