Virtual Private Cloud (VPC) by

IP Addresses - What is it?

mjhouston — 2022-09-02 01:20:26 UTC

How computers communicate with each other
Use a DNS (Domain Name System) to convert to a format that we can understand

VPC

mjhouston — 2022-09-02 03:44:39 UTC

Logically isolated portion of the AWS cloud within a region
Can use multiple AZs to deploy subnets

Subnets

mjhouston — 2022-09-02 03:45:01 UTC

A segment of a VPC’s IP address range where you can place groups of isolated resources (maps to an AZ, 1:1).

Networking

mjhouston — 2022-09-02 03:45:30 UTC

IP Address Structure

mjhouston — 2022-09-02 03:46:33 UTC

Dotted Decimal Notation
Most Significant-->192.168.0.1<--Least Significant

192.168.0 - Network ID - .1 - Host ID

CIDR Blocks

mjhouston — 2022-09-02 03:57:05 UTC

Route Tables

mjhouston — 2022-09-02 04:11:13 UTC

Public Subnet

mjhouston — 2022-09-02 04:22:40 UTC

If a subnet’s traffic is routed to an internet gateway, the subnet is known as a public subnet.

Private Subnet

mjhouston — 2022-09-02 04:22:52 UTC

If a subnet doesn’t have a route to the internet gateway, the subnet is known as a private subnet.

VPC Peering

mjhouston — 2022-09-02 04:23:20 UTC

VPC Endpoints

mjhouston — 2022-09-02 04:23:50 UTC

Virtual Private Networks (VPN)

mjhouston — 2022-09-02 04:24:08 UTC

AWS Client VPN

mjhouston — 2022-09-02 04:24:49 UTC

AWS Site-to-Site VPN

mjhouston — 2022-09-02 04:25:06 UTC

AWS VPN CloudHub

mjhouston — 2022-09-02 04:25:20 UTC

Direct Connect (DX)

mjhouston — 2022-09-02 04:25:34 UTC

Direct Connect Gateway

mjhouston — 2022-09-02 04:25:49 UTC

Transit Gateway

mjhouston — 2022-09-02 04:26:00 UTC

Components

mjhouston — 2022-09-02 04:39:20 UTC

A Virtual Private Cloud: A logically isolated virtual network in the AWS cloud. You define a VPC’s IP address space from ranges you select.
Subnet: A segment of a VPC’s IP address range where you can place groups of isolated resources (maps to an AZ, 1:1).
Internet Gateway: The Amazon VPC side of a connection to the public Internet.
NAT Gateway: A highly available, managed Network Address Translation (NAT) service for your resources in a private subnet to access the Internet.
Hardware VPN Connection: A hardware-based VPN connection between your Amazon VPC and your datacenter, home network, or co-location facility.
Virtual Private Gateway: The Amazon VPC side of a VPN connection.
Customer Gateway: Your side of a VPN connection.
Router: Routers interconnect subnets and direct traffic between Internet gateways, virtual private gateways, NAT gateways, and subnets.
Peering Connection: A peering connection enables you to route traffic via private IP addresses between two peered VPCs.
VPC Endpoints: Enables private connectivity to services hosted in AWS, from within your VPC without using an Internet Gateway, VPN, Network Address Translation (NAT) devices, or firewall proxies.
Egress-only Internet Gateway: A stateful gateway to provide egress only access for IPv6 traffic from the VPC to the Internet.

VPN Only Subnet

mjhouston — 2022-09-02 04:42:23 UTC

If a subnet doesn’t have a route to the internet gateway, but has its traffic routed to a virtual private gateway for a VPN connection, the subnet is known as a VPN-only subnet.

Internet Gateway

mjhouston — 2022-09-02 04:42:59 UTC

An Internet Gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the internet.

Only 1 per VPC

Purpose:

To provide a target in your VPC route tables for internet-routable traffic.
To perform network address translation (NAT) for instances that have been assigned public IPv4 addresses.

Security

mjhouston — 2022-09-02 04:45:23 UTC

Security Groups

mjhouston — 2022-09-02 04:46:21 UTC

Network ACLs

mjhouston — 2022-09-02 04:47:02 UTC

Connectivity

mjhouston — 2022-09-02 04:48:10 UTC

Cheat Sheet

mjhouston — 2022-09-02 04:52:11 UTC

https://digitalcloud.training/amazon-vpc/