Networking Flashcards
VPC
Virtual Private Network
Amazon VPC enables you to provision an isolated section of the AWS Cloud. In this isolated section, you can launch resources in a virtual network that you define. Within a virtual private cloud (VPC), you can organize your resources into subnets.
Subnet
A subnet is a section of a VPC that can contain resources such as Amazon EC2 instances.
Internet Gateway
An internet gateway is a connection between a VPC and the internet. Without an internet gateway, no one can access the resources within your VPC.
Virtual Private Gateway
A virtual private gateway enables you to establish a virtual private network (VPN) connection between your VPC and a private network, such as an on-premises data center or internal corporate network. A virtual private gateway allows traffic into the VPC only if it is coming from an approved network.
AWS Direct Connect
is a service that enables you to establish a dedicated private connection between your data center and a VPC.
Network ACL
A network access control list (ACL) is a virtual firewall that controls inbound and outbound traffic at the subnet level.
By default, your account’s default network ACL allows all inbound and outbound traffic, but you can modify it by adding your own rules.
Network ACLs perform stateless packet filtering. They remember nothing and check packets that cross the subnet border each way: inbound and outbound.
Security Group
A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.
By default, a security group denies all inbound traffic and allows all outbound traffic.
Security groups perform stateful packet filtering. They remember previous decisions made for incoming packets.
Amazon Route 53
Amazon Route 53 is a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications hosted in AWS.
Amazon Route 53 connects user requests to infrastructure running in AWS (such as Amazon EC2 instances and load balancers). It can route users to infrastructure outside of AWS.
Another feature of Route 53 is the ability to manage the DNS records for domain names. You can register new domain names directly in Route 53. You can also transfer DNS records for existing domain names managed by other domain registrars. This enables you to manage all of your domain names within a single location.
DNS
Domain Name System
When you enter the domain name into your browser, this request is sent to a customer DNS resolver.
The customer DNS resolver asks the company DNS server for the IP address that corresponds to AnyCompany’s website.
The company DNS server responds by providing the IP address for AnyCompany’s website, 192.0.2.0.
