Systems and methods for enhanced content-based routing with signature-based authentication

A method for routing network packets using signature-based authentication:

• receiving, by a load balancer, a network request comprising a destination uniform resource indicator (URI) and a signature header based on the destination URI, wherein the signature header is associated with authenticating the network request;
• verifying, by the load balancer, a certificate for a domain name of the destination URI;
• initiating, by the load balancer, a serverless instance based on the verifying;
• allocating, by the serverless instance, a region for the network request;
• copying, by the serverless instance, the signature header of the network request;
• retrieving, by the serverless instance, a first address for an intended destination address of the region;
• resolving, by the serverless instance, the destination URI to the intended destination address, wherein the intended destination address is different than DNS records;
• and
• sending, by the serverless instance, content of the network request and the signature header to the intended destination address without modifying the signature header.

A system for routing network packets using signature-based authentication comprises:

• a global endpoint for a multi-region service;
• and
• load balancers for respective regions of the multi-region service, wherein a first load balancer is configured to:
• receive, from the global endpoint, a network request comprising a destination uniform resource indicator (URI) and a signature header based on the destination URI, wherein the signature header is associated with authenticating the network request;
• verify a certificate for a domain name of the destination URI;
• initiate a serverless instance based on the verifying;
• allocate, using the serverless instance, a region for the network request;
• copy, using the serverless instance, the signature header of the network request;
• retrieve, using the serverless instance, a first address for an intended destination address of the region;
• resolve, using the serverless instance, the destination URI to the intended destination address, wherein the intended destination address is different than DNS records;
• and
• send, using the serverless instance, content of the network request and the signature header to the intended destination address without modifying the signature header.