|
69 | 69 | - Databases |
70 | 70 | - S3 buckets |
71 | 71 |
|
| 72 | +### Multi-region: Do you need it? |
| 73 | + |
| 74 | +- [AWS History Outages](https://awsmaniac.com/aws-outages/) |
| 75 | + |
| 76 | +#### When Multi-region? |
| 77 | + |
| 78 | +- Failover |
| 79 | + - Transition load to alternate region during regional system failures |
| 80 | +- Latency |
| 81 | + - Process and serve non-static data closer to source |
| 82 | +- Compliance |
| 83 | + - Data and services located in certain region to address restrictions |
| 84 | + |
72 | 85 | ## AWS Networking Services Overview |
73 | 86 |
|
74 | 87 | ### VPC |
|
97 | 110 | - Use for simple applications |
98 | 111 | - Modify default or build additional VPCs |
99 | 112 |
|
| 113 | +#### Network Infrastructure |
| 114 | + |
| 115 | +- Redundant high-bandwidth connections |
| 116 | + - Private AWS network |
| 117 | + - Pulic Internet |
| 118 | +- Amazon global network backbone |
| 119 | + - Region-to-region connection |
| 120 | +- EC2 network speed varies by instance type |
| 121 | + |
100 | 122 | ### IP Adresses |
101 | 123 |
|
102 | 124 | #### Internal IP Addresses |
|
108 | 130 | - Subnets cannot overlap |
109 | 131 | - Ensure enough capacity |
110 | 132 | - Instance Address |
111 | | - |
112 | 133 | - Determined by subnet CIDR |
113 | 134 |
|
114 | 135 | - CIDR Blocks - Allowed block size between /16 and /28 |
|
139 | 160 |
|
140 | 161 | ### VPC Design Patterns |
141 | 162 |
|
| 163 | +#### Internet-accessible VPC |
| 164 | + |
| 165 | +- VPC with public subnet |
| 166 | +- All instances accessed via internet |
| 167 | + - Internet gateway |
| 168 | + - Router |
| 169 | + - Public IP addresses |
| 170 | +- Instance protection |
| 171 | + - Security Group |
| 172 | + - Network ACL |
| 173 | + |
| 174 | +#### VPC with Public and Private Subnets |
| 175 | + |
| 176 | +- Private subnet ingress only from public subnet |
| 177 | + - Bastion / jump box |
| 178 | + - Internal IP address |
| 179 | +- Private instance protection |
| 180 | + - Routes |
| 181 | + - No public IP address |
| 182 | +- Private subnet internet access via NAT gateway |
| 183 | + - Maintenance, patches |
| 184 | + |
| 185 | +#### VPC with Public and Private Subnets with VPN connection |
| 186 | + |
| 187 | +- Additional access to private subnet via VPN |
| 188 | + - Customer gateway |
| 189 | + - VPN connection |
| 190 | + - Use internal IP address |
| 191 | +- Convenient |
| 192 | + - No Bastion needed |
| 193 | + - Extension of data center |
| 194 | + |
142 | 195 | ### Elastic Load Balancing |
143 | 196 |
|
144 | 197 | ### Route 53 (DNS) |
|
0 commit comments