09-VPC

type
status
date
slug
summary
tags
category
icon
password
  1. VPC: Virtual Private Cloud
    1. virtual data center
  1. network diagram
notion image
  1. one subnet only exit in one availiablity zone
  1. cidr: Classless Inter-Domain Routing
  1. range
    1. /16 to /28
    2. 192.168.0.0/24 host/subnet
  1. build a self VPC
    1. add vpc
    2. add subnet
    3. add internet gateway
      1. attach to vpc
    4. add route tables
      1. add to internet gateway
      2. add public sublnet to explicit subnet associations
  1. NAT
    1. Network Address Translation Gateway
    2. safely request the outside without export port
  1. security groups
    1. Responses to allowed inbound traffic are allowed to flow out, regardless of outbound rules.
    2. stateful
  1. network acls
    1. a subnet can be associated with only 1 network acl at a time
    2. stateless
    3. default will allows all traffic
    4. custom network acls denies all traffic
    5. use acls to block ips
    6. rules started at lowest number rule
  1. vpc endpoints
    1. like nat gateways
    2. communicate with internal gateways
    3. virtual divices
    4. types
      1. interface endpoints
        1. private ip address
      2. gateway endpoints
        1. similar to NAT
    5. can use gateway endpoints to connect to s3 from ec2
  1. vpc peering
    1. allow connect 1 vpc with another route using private ip
  1. private link
    1. peering vpcs to 10 100 or 1000 of customer vpcs, use this
    2. requires a network load balancer on the service vpc and an eni on the custmer vpc
  1. vpc cloudhub
    1. aggregate from all your different customer sites all over the world
  1. direct connect
    1. establish a dedicated network connection from your premises to AWS
    2. types
      1. dedicated connection
      2. hosted connection
        1. from partner
    3. direct connect to aws
    4. useful for high-throughput workloads
    5. helpful when you need a stable and reliable secure connection
  1. transit gateway
    1. can simplify your network topology
    2. not support vpc peering connection configuration
  1. 5g networking with aws wavelength
10-Route 5308-RDS