---
title: Networking on AWS
---

Networking on AWS
===
Networking services on AWS

:::warning
[toc]
:::

### Keywords
:::info
- Load Balancing
- Public vs Private IPs
- Dynamic and Static IPs
- Firewalls
- Access groups
- NAT
- CDN
- DNS
- Routing
- VLAN <> Subnets
- Customer Gateway
- Application Gateway (Layer 7 LB in Azure)
- WAF
:::

### Single Network on AWS [VPC]
:::success
**Routing**
- Subnet (Public or Private)
- Route Tables
- Internet Gateway (IGW)
- NAT Gateway --> external communication for resources in private subnets
- ENI - Elastic Network Interface | [NIC-->vNIC-->ENI]
- Elastic IPs --> Static IPs on AWS

**Security**
- Security Groups
- Firewall at the instance level
- Stateful
- Default: All incoming blocked; all outgoing allowed
- No rules precedence
- No deny rules; only allow
- Network ACLs
- Firewall at the subnet level
- Stateless
- Default: All incoming and outgoing allowed
- Rules precedence applicable
- Allow/deny rules applicable
- VPC Flow logs
:::

**Basic VPC with Subnets**


**Basic VPC with Internet Gateway**


**Basic VPC with Internet and NAT Gateway**


#### CIDR notation
:::info

10.0.0.0/8     --> 10.{0-255}.{0-255}.{0-255} --> 256x256x256 --> 16,777,216
172.31.0.0/16  --> 172.31.{0-255}.{0-255} --> 256x256 --> 65,536
192.168.0.0/24 --> 192.168.0.{0-255} --> 256
0.0.0.0/0      --> All the possible IPs in the world (Notation for Internet)
1.2.3.4/32     --> CIDR notation for the IP 1.2.3.4

:::

#### AWS IP reservations
:::success

172.31.0.0 - Network Identifier
        .1 - Gateway
        .2 - DNS
        .3 - Future/unknown
      .255 - Broadcast

:::

---
### Multiple/Hybrid Networks on AWS
---

:::info
- VPN
- Direct Connect
- VPC Peering
- Transit Gateways
- Virtual Private Gateways
- VPC Endpoints
- CloudFront Distribution
- Route 53 (DNS)
:::

### Hands-on activities
:::danger
Lesson 05 - Demo 01 | Creating Key Pair for EC2
Lesson 05 - Demo 02 | Creating a Default VPC
Lesson 05 - Demo 03 | Exploring Network ACL Firewall
Lesson 05 - Demo 04 Creating a Flow Log in the VPC
Lesson 05 - Demo 05 | Configuring Subnets, Route Table, and NAT

Complete the Networking section of AWS Workshop:

- https://catalog.workshops.aws/general-immersionday/en-US/basic-modules/20-vpc
:::

### References
- https://www.rfc-editor.org/rfc/rfc1918