For 2, no you have to block port 80 or whatever http typesense port you have configured using iptables. For 1, what exactly graviton instance? What's the run time memory used? Let's first focus on disabling http traffic to isolate search traffic, which will give us more hints.