Mastering AWS Networking: A Practical Guide to VPCs and Cloud Connectivity

This presentation covers fundamental concepts of networking in AWS, including an overview of key networking components, how to create and configure a Virtual Private Cloud (VPC), and explore essential AWS features like subnets, route tables, internet gateways, and security groups. Designed for beginners and professionals alike, it provides practical guidance on building and managing networks in the cloud.

1. Networking on AWS with VPC
Sidath Munasinghe

2. Networking Basics

3. Networking Basics
➔Private vs Public Networks
➔Private IP ranges:
◆10.0.0.0 to 10.255.255.255
◆172.16.0.0 to 172.31.255.255
◆192.168.0.0 to 192.168.255.255

4. NAT (Network Address Translation)
➔Allows devices within the private network to connect to the internet

5. Subnets/ Subnetworks
➔ Smaller network segment within a larger network
➔ Used to divide networks for organizational or security purposes

6. CIDR
➔IP address allocation method
➔Can be used to define IP ranges easily
➔0.0.0.0/0: The Default Route

7. AWS VPC

8. ➔An AWS service to create your networks in AWS Cloud
➔Use reliable AWS infrastructure to build your network
➔Features
◆Basic network capabilities (Networks/Subnets etc.)
◆Traffic monitoring
◆VPN connections
◆Firewalls / Access control
◆VPC peering
◆High performance integration with other AWS services via AWS internal network

AWS VPC (Virtual Private Cloud)

9. Creating a VPC - Components
➔VPC
➔Subnets
➔NAT Gateway : Allows resources in the private subnet to access internet
➔Egress-Only Internet Gateway : NAT Gateway functionality for IPv6
➔Internet Gateway : Internet can reach your resources and vice versa
➔Route table : Define the routing rules
➔Security Group : Access control

10. VPC Overview

11. DEMO

12. Creating a VPC - Steps
1.Create VPC with CIDR allocation
2.Create subnets with proper CIDR allocation
3.Create internet gateway and attach it to the VPC
4.Create route table for public subnet and associate it
5.Create NAT gateway and attach Elastic IP
6.Create route table for private subnet

13. Using the VPC

14. Other Features

15. Security & Access Control
➔NACL (Network Access Control Lists)
➔Security Groups

16. NAT Gateway vs NAT Instance

17. VPC Peering
➔Networking connection between two VPCs that allows them to communicate with each other as if
they were within the same network
➔Supports,
◆ cross-region peering with extra cost for data transfer
◆ across multiple AWS accounts
➔Transitive Peering Is Not Supported
➔Provides low latency since connected by internal AWS network
➔The VPCs involved in peering must have non-overlapping CIDR blocks

18. VPC Endpoints
➔Enable to create private connections between your Virtual Private Cloud (VPC) and supported AWS services
➔Benefits
◆ Extra security
◆ Low latency
◆ No Internet/NAT Gateway required
➔Types
◆ Interface Endpoints
●Support for wide range of services
●Works by creating an ENI
◆ Gateway Endpoint
●Support only for S3 & DynamoDB
●Works by updating route tables
●Less costly

19. VPN Connections
➔Virtual Private Network (VPN) is a secure, encrypted connection that allows users to access a private
network over a public network like the Internet
➔Types
◆ Site-to-site VPN
◆ Point to site/Remote Access VPN
➔Need to configure,
◆ Virtual Private Gateway within VPC
◆ Customer Gateway at on premise network

20. Direct Connect & Direct Connect Gateway
➔Direct Connect provides a dedicated network connection (fiber) from your on-premises data center
to AWS
◆ more consistent bandwidth
◆ lower latency
◆ enhanced security
➔Direct Connect Gateway allows you to connect a single Direct Connect connection to multiple AWS
VPCs across different AWS regions

21. Transit Gateway
➔AWS Transit Gateway enables you to connect multiple VPCs, on-premises networks, and remote
offices together through a single gateway
➔Centralized Hub for Connectivity
➔Highly scalable

23. Q & A

24. Thanks!