Lambda のネットワーク帯域幅を Service Quotas で 3,000 Mbps に引き上げて実測してみた

Parameters:
  VpcId:
    Type: AWS::EC2::VPC::Id
  SubnetId:
    Type: AWS::EC2::Subnet::Id
  InstanceType:
    Type: String
    Default: c8gn.large
  AmiId:
    Type: AWS::SSM::Parameter::Value<AWS::EC2::Image::Id>
    Default: /aws/service/ami-amazon-linux-latest/al2023-ami-kernel-default-arm64

Resources:
  ServerSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: iperf3 server - TCP 5201 only, no SSH
      VpcId: !Ref VpcId
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 5201
          ToPort: 5201
          CidrIp: 0.0.0.0/0
          Description: iperf3 from Lambda (dynamic source IP)

  ServerRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: ec2.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore

  ServerInstanceProfile:
    Type: AWS::IAM::InstanceProfile
    Properties:
      Roles:
        - !Ref ServerRole

  ServerInstance:
    Type: AWS::EC2::Instance
    Properties:
      ImageId: !Ref AmiId
      InstanceType: !Ref InstanceType
      IamInstanceProfile: !Ref ServerInstanceProfile
      SubnetId: !Ref SubnetId
      SecurityGroupIds:
        - !GetAtt ServerSecurityGroup.GroupId
      UserData:
        Fn::Base64: |
          #!/bin/bash
          dnf install -y iperf3
          cat > /etc/systemd/system/iperf3.service <<'UNIT'
          [Unit]
          Description=iperf3 server
          After=network-online.target

          [Service]
          ExecStart=/usr/bin/iperf3 --server --port 5201
          Restart=always

          [Install]
          WantedBy=multi-user.target
          UNIT
          systemctl daemon-reload
          systemctl enable --now iperf3

Outputs:
  InstanceId:
    Value: !Ref ServerInstance
  PublicIp:
    Value: !GetAtt ServerInstance.PublicIp

def run_iperf3(event, memory_mb):
    server_ip = event["server_ip"]
    duration = event.get("duration", 10)
    parallel = event.get("parallel", 4)
    cmd = [
        "/usr/bin/iperf3",
        "-c", server_ip,
        "-p", str(event.get("port", 5201)),
        "-t", str(duration),
        "-P", str(parallel),
        "-J",
    ]
    proc = subprocess.run(cmd, capture_output=True, text=True, timeout=duration + 60)
    result = json.loads(proc.stdout)
    sent = result.get("end", {}).get("sum_sent", {})
    return {
        "memory_mb": memory_mb,
        "sent_mbps": round(sent.get("bits_per_second", 0) / 1_000_000, 1),
        "retransmits": sent.get("retransmits"),
    }

def run_s3(event, memory_mb):
    config = TransferConfig(
        max_concurrency=event.get("concurrency", 10),
        multipart_chunksize=event.get("chunk_mb", 16) * 1024 * 1024,
        multipart_threshold=event.get("chunk_mb", 16) * 1024 * 1024,
        use_threads=event.get("concurrency", 10) > 1,
    )
    sink = NullSink()
    started = time.time()
    boto3.client("s3").download_fileobj(event["bucket"], event["key"], sink, Config=config)
    elapsed = time.time() - started
    return {
        "memory_mb": memory_mb,
        "bytes": sink.total,
        "elapsed_s": round(elapsed, 3),
        "mbps": round(sink.total * 8 / elapsed / 1_000_000, 1),
    }

aws s3api create-bucket --bucket lambda-bw-verify-usw2-example \
  --create-bucket-configuration LocationConstraint=us-west-2 --region us-west-2

aws lambda invoke --function-name bw-test --cli-binary-format raw-in-base64-out \
  --payload '{"mode":"put","bucket":"lambda-bw-verify-usw2-example","key":"dummy-1gb.bin","size_mb":1024,"part_mb":64}' \
  response.json --region us-west-2

{"mode": "put", "ok": true, "memory_mb": "10240", "bucket": "lambda-bw-verify-usw2-example", "key": "dummy-1gb.bin", "content_length": 1073741824, "elapsed_s": 9.93, "region": "us-west-2"}