Thursday, 24 October 2019

AWS VPC - Key concepts

Amazon VPC is the networking layer for Amazon EC2.


  • virtual private cloud (VPC) is a virtual network dedicated to your AWS account. Span across all Availability Zones in a Region. You must assign a IPv4 or IPv6 CIDR block to VPC.
  • subnet is a range of contiguous block of IP addresses (IPv4 or IPv6) in your VPC allocated from the VPC CIDR block. Resides within a single Availability Zone (AZ) and cannot span multiple AZ. Smallest subnet you can create is a /28 (16 IPv4 addresses).
  • route table contains a set of rules, called routes, that are used to determine where network traffic is directed.
  • An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the internet. It therefore imposes no availability risks or bandwidth constraints on your network traffic.
  • VPC endpoint enables you to privately connect your VPC to supported AWS services and VPC endpoint services powered by PrivateLink without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. Instances in your VPC do not require public IP addresses to communicate with resources in the service. Traffic between your VPC and the other service does not leave the Amazon network.

No comments:

Post a Comment

Site To Site VPN (AWS managed VPN)

AWS Details:  https://docs.aws.amazon.com/vpn/latest/s2svpn/VPNTunnels.html Install Openswan (details:  https://www.openswan.org/ ...