Networking Flashcards
Cloud Network Services
- Amazon VPC
- AWS Transit Gateway
- AWS Privatelink
- Amazon Route53
Define and provision an isolated network for your AWS resources
Amazon VPC
Connect VPCs and on-premises networks
Amazon Transit Gateway
Provide private connectivity between VPCs and on-premises applications
AWS Privatelink
Host your own managed DNS
Amazon Route 53
Services for Network Scaling
- Elastic Load Balancing
- AWS Global Accelerator
Automatically distribute network traffic across a pool of resources
Elastic Load Balancing
Direct traffic through the AWS global network to improve global application performance
AWS Global Accelerator
Content Delivery
- Amazon CloudFront
Securely deliver data, videos, and applications to customers globally with low latency and high transfer speeds
Amazon CloudFront
IPv4 Address
Four sets of numbers ranging from 0-255 resulting in 256 numbers per set.
Private network IP Addresses
10.0.01
172.16.0.1
192.168.0.1
VPC
Create a virtual network for AWS services to exist in a local IP address range using the local network
- Gated community for VM’s and services in AWS
NAT gateway
VM’s access for internet
Internet Gateway
Internet to access instances
Network access control list
Control which traffic is allowed into and out of VPC network
CloudFront
Exists between website and visitors to deliver data, videos, applications, and websites with low latency and high transfer speeds.
Serves internet traffic from edge locations. Data is cached in edge locations. If necessary, cloudFront checks website server for new content to save to edge locations.
Amazon CloudFront Benefits
- Increases security
- Traffic spike protection
- Lambda@Edge (lambda code running at edge locations)
- Real-time metrics
- Cost-effective
DNS
Database that maps IP addresses to domains
Routing policies
- Simple Routing
- Weighted Policy (multiple IP Addresses to spread traffic load, uses weights of 0-255)
- Geolocation Policy (reply with certain IP Addresses based on location)
- Latency Policy (AWS resources with lowest latency or fastest response)
- Failover Policy (point traffic at a single IP Address with failover if there is a problem)
- Multi-value Answer Policy (multiple healthy values)
Amazon Virtual Private Cloud (VPC)
is a foundational service that allows you to create a secure private network in the AWS cloud where you launch your resources.
- private virtual network
- launch resources like EC2 instances inside the VPC
- Isolate and protect resources
- spans availability zones in a region
Peering
VPC peering allows you to connect 2 VPCs together, facilitating the transfer of data in a secure manner.
Amazon Route 53
is a DNS service that routes users to applications.
- Domain name registration
- Performs health checks on AWS resources
- Supports hybrid cloud architectures
AWS Direct Connect
is a dedicated physical network connection from your on-premises data center to AWS.
- Dedicated physical network connection
- Connects on-premises data center to AWS
- Data travels over a private network
- Supports a hybrid environment
AWS VPN
Site-to-Site VPN creates a secure connection between your internal networks and your AWS VPCs.
- Similar to Direct Connect, but travels over public internet
- Data is automatically encrypted
- Connect on-prem to AWS
- Supports a hybrid environment
API Gateway
allows you to build and manage APIs
