Module 5 (Networking & Content Delivery) Flashcards
What is a network?
2 or more machines, connected & can communicate, this requires a network device (router)
What are the two types of IP addresses?
- IPv4 (32bit address)
- IPv6 (128bit address m)
What is an OSI model?
Open System Interconnection = to explain how data travels over a network
- consists of seven layers
What are the 7 layers of an OSI model?
1) physical (uses bluetooth, DSL or ISDN)
2) data link (uses ethernet, vlan or wifi)
3) network (uses IP, ICMP or EIGRP)
4) transport (uses TCP, UDP, ESP)
5) session (uses SCP, NetBIOS, PAP)
6) presentation (uses JPEG, MPEG, TLS, LPP)
7) application (uses FTP Telnet, SSH, HTTP)
Remember: Please Do Not Throw Sausage Pizza Away)
What is a CIDR?
way to express a group of IP addresses that are consecutive to each other
= Classless Inter-Domain Routing
use case: Subnet of VPC requires own CIDR block, for each CIDR block AWS reserves 5 IP addresses: (reserved IP addresses)
1) network address
2) VPC local router (internal communication)
3) DNS resolution
4) future use
5) network broadcast address
What is an elastic network interface?
= virtual network interface that you can attach to an instance or detach from the instance & attach it to a new one
-> to redirect traffic
What is a route table?
= set of rules (=routes) to direct network traffic to and from subnet
-> each subnet must be associated with route table
What is an internet gateway?
= VPC component to communicate between instances in your VPC & the public internet
Why?
To provide target in VPC route tables for internet traffic, to perform network address translation for instances assigned to public IPv4 addresses
What is a NAT gateway?
Network Address Translation = so that instances in a private subnet can connect to the internet and other AWS services (without the public internet!)
VPC sharing vs. VPC peering
Sharing = share subnets with other AWS accounts in same org Peering = privately route traffic between two VPCs (even between regions and different AWS accounts)
How can you connect a remote corporate data center to the VPC?
- attach virtual private gateway to the VPC
- create AWS site-to-site VPN conection
- configure routing to pass traffic through connection
What do you do if performance is negatively affected because remote data center is located away from region?
AWS direct connect establishes a private network connection to customer gateway and data center
How can you connect 100s of VPCs together?
AWS transit gateway
How can you build in security in VPC?
- security groups: virtual firewall at instance level, filter traffic, allow
- ACLs: subnet level, control in & outbound traffic, deny or allow
What is Amazon Route53?
DNS resolution, translate internet name to corresponding IP address
