Book Image

AWS Networking Cookbook

By : Satyajit Das, Jhalak Modi

Book Image

AWS Networking Cookbook

By: Satyajit Das, Jhalak Modi

Overview of this book

This book starts with practical recipes on the fundamentals of cloud networking and gradually moves on to configuring networks and implementing infrastructure automation. This book then supplies in-depth recipes on networking components like Network Interface, Internet Gateways, DNS, Elastic IP addresses, and VPN CloudHub. Later, this book also delves into designing, implementing, and optimizing static and dynamic routing architectures, multi-region solutions, and highly available connectivity for your enterprise. Finally, this book will teach you to troubleshoot your VPC's network, increasing your VPC's efficiency. By the end of this book, you will have advanced knowledge of AWS networking concepts and technologies and will have mastered implementing infrastructure automation and optimizing your VPC.

Preface

What this book covers

What you need for this book

Who this book is for

Reader feedback

Customer support

Free Chapter

Getting Started with AWS Networking Components

Getting Started with AWS Networking Components

Creating an account in AWS

Creating an admin user in AWS

Creating a VPC and a subnet with IPv6

Creating an EC2 with an IPv6 address

Creating NAT on EC2 instance

Working with network interfaces

Configuring AWS CLI

Building Your Own Custom VPC

Building Your Own Custom VPC

Managing public and private subnets

Managing a Network ACL

Managing a Security Group

Managing an Internet Gateway

Managing a NAT Gateway

Managing a Route Table

Managing EC2 instances

VPC Advanced Components

VPC Advanced Components

Assigning multiple IPs to an instance and ENI

Accessing an instance within the network

Accessing an instance from outside AWS

Creating an application ELB

Creating a launch configuration

Creating an Auto Scaling group

Creating VPC peering

Accepting VPC peering

Configuring VPN connections to your Amazon VPC

Configuring Global Scale Infrastructure

Configuring Global Scale Infrastructure

Creating a VPC and subnet from the CLI

Creating a VPC to DC connectivity--VPN Tunneling

Creating a VPC with a private subnet and connecting DC

Creating a multi-region VPC communication

Setting up a private DNS with a VPC

Migrating to IPv6

Working with Infrastructure Automation

Working with Infrastructure Automation

Creating, storing, and testing the template--CloudFormation

Creating a new stack--CloudFormation

Modify the stack--CloudFormation

Deleting the stack--CloudFormation

Setting up Ansible

Installing Ansible

Creating Ansible playbooks for creating VPC

Working with Route 53

Working with Route 53

Registering a new domain

Transferring a domain into Amazon Route 53

Creating hosted zones and record sets

Deleting a public hosted zone

Creating an Alias record set

Creating a private hosted zone

Working with the weighted routing policy

Working with the failover routing policy and health checks

Cloud Security and Network Compliance

Cloud Security and Network Compliance

Setting up CloudFront--EC2 origin

Setting up CloudFront--S3 origin

Geographic restrictions with Amazon CloudFront

Customizing error responses in CloudFront

Setting up CloudWatch monitoring

Setting up ELB and Auto Scaling

Trusted Advisor

Protecting log information--sending logs to CloudWatch

Starting CloudTrail

Submitting a penetration testing request

Troubleshooting and VPC Limits

Troubleshooting and VPC Limits

Troubleshooting IP address overlapping

Errors while connecting an EC2 instance in a VPC

Internet not accessible in the instance

Internet not accessible in the private subnet instance (NAT Gateway)

Not able to delete a VPC

Enabling VPC flow logs

Increasing VPC Limits

Pricing of VPC and Related Components

Pricing of VPC and Related Components

VPC, VPN and Nat Gateway pricing

EC2, ELB and Elastic IP pricing

Route 53 pricing

Direct Connect pricing

CloudFront pricing

WAF and Cloud Shield pricing

Customer Reviews

5 star

0

4 star

0

3 star

0

2 star

0

1 star

0

Introduction

In this chapter, we will learn how to quickly create different AWS VPC networking topologies. We will also learn how to connect two VPCs in the same region or across different AWS regions. Criteria for choosing one of the different available topologies of VPC will depend on the following different considerations:

Availability of the application deployed to AWS: Single AZ deployment can provide moderate availability. Multi AZ deployments will provide high availability and fault tolerance of a single AZ failure. Multi region deployment will provide very high availability of the application. It will be available even if the complete region of AWS fails.
Creating a public and private subnet: Public and private subnets need to be created based on the security requirements of different layers of the application.
Connectivity requirement between data center (DC) and AWS...