How to determine the region to which Secure Access connects

[masa.oym]

Hello, 

I would like to confirm the technical specifications of Cisco Secure Access.

How is the region determined when connecting from Secure Client (AnyConnect VPN) to Secure Access?

When multiple IP pools are assigned to a VPN Profile, the name "Auto Select Nearest Location" is added to the AnyConnect VPN destination (Global FQDN).
I assume that the nearest region is selected in some way, but I am unclear about the flow for determining the nearest region from the connection source.

Do Client ZTA module and Clientless ZTA also implement a mechanism for connecting to the nearest region?

[jkachika]

hello there,

VPN uses a latency based routing mechanism to figure out the closest region the headends are deployed and resolves to their IP addresses. For now, this is based on AWS latency based routing which essentially figures out the location of connection source (I'm guessing it uses maxmind) and compares that with a precomputed table against all their regions to determine the least latency region. I'm not fully familiar with ZTA internals but I believe ZTA also uses a similar mechanism. 

[masa.oym]

Hello jkachika,
Does the latency based routing mechanism use the "Amazon Route53" technology? If so, I would like to check the following site. Thanks.
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy-latency.html