AWS Networking Cookbook

By : Satyajit Das, Jhalak Modi

AWS Networking Cookbook

By: Satyajit Das, Jhalak Modi

Overview of this book

This book starts with practical recipes on the fundamentals of cloud networking and gradually moves on to configuring networks and implementing infrastructure automation. This book then supplies in-depth recipes on networking components like Network Interface, Internet Gateways, DNS, Elastic IP addresses, and VPN CloudHub. Later, this book also delves into designing, implementing, and optimizing static and dynamic routing architectures, multi-region solutions, and highly available connectivity for your enterprise. Finally, this book will teach you to troubleshoot your VPC's network, increasing your VPC's efficiency. By the end of this book, you will have advanced knowledge of AWS networking concepts and technologies and will have mastered implementing infrastructure automation and optimizing your VPC.

Preface

What this book covers

What you need for this book

Free Chapter

Getting Started with AWS Networking Components

Introduction

Creating an account in AWS

Creating an admin user in AWS

Creating a VPC and a subnet with IPv6

Creating an EC2 with an IPv6 address

Creating NAT on EC2 instance

Working with network interfaces

Configuring AWS CLI

Building Your Own Custom VPC

Introduction

Managing a VPC

Managing public and private subnets

Managing a Network ACL

Managing a Security Group

Managing an Internet Gateway

Managing a NAT Gateway

Managing a Route Table

Managing EC2 instances

VPC Advanced Components

Introduction

Assigning multiple IPs to an instance and ENI

Accessing an instance within the network

Accessing an instance from outside AWS

Creating an application ELB

Creating a launch configuration

Creating an Auto Scaling group

Creating VPC peering

Accepting VPC peering

Configuring VPN connections to your Amazon VPC

Configuring Global Scale Infrastructure

Introduction

Creating a VPC and subnet from the CLI

Creating a VPC to DC connectivity--VPN Tunneling

Creating a VPC with a private subnet and connecting DC

Creating a multi-region VPC communication

Setting up a private DNS with a VPC

Migrating to IPv6

Working with Infrastructure Automation

Introduction

Creating, storing, and testing the template--CloudFormation

Creating a new stack--CloudFormation

Modify the stack--CloudFormation

Deleting the stack--CloudFormation

Setting up Ansible

Installing Ansible

Creating Ansible playbooks for creating VPC

Working with Route 53

Introduction

Registering a new domain

Transferring a domain into Amazon Route 53

Creating hosted zones and record sets

Deleting a public hosted zone

Creating an Alias record set

Creating a private hosted zone

Working with the weighted routing policy

Working with the failover routing policy and health checks

Cloud Security and Network Compliance

Introduction

Setting up CloudFront--EC2 origin

Setting up CloudFront--S3 origin

Geographic restrictions with Amazon CloudFront

Customizing error responses in CloudFront

Setting up CloudWatch monitoring

Setting up ELB and Auto Scaling

Trusted Advisor

Protecting log information--sending logs to CloudWatch

Starting CloudTrail

Submitting a penetration testing request

Troubleshooting and VPC Limits

Introduction

Troubleshooting IP address overlapping

Errors while connecting an EC2 instance in a VPC

Internet not accessible in the instance

Internet not accessible in the private subnet instance (NAT Gateway)

Not able to delete a VPC

Enabling VPC flow logs

Increasing VPC Limits

Pricing of VPC and Related Components

Introduction

VPC, VPN and Nat Gateway pricing

EC2, ELB and Elastic IP pricing

Route 53 pricing

Direct Connect pricing

CloudFront pricing

WAF and Cloud Shield pricing

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Increasing VPC Limits

VPC and, in fact, all AWS resources come with certain soft/hard limits so that people don't misuse or continue to spin up instances without any requirement. It also helps if your AWS server/account gets hacked and the hacker starts spinning up multiple high configuration servers to give you a billing heart attack.

Getting ready

Limits of various services:

Sr.no	Resources	Default limit	Limit type	Comments
1	VPC per region	5	Soft Limit	Internet Gateway per region will also increase by the same number
2	Subnets per VPC	200	Soft Limit
3	EIP per region	5	Soft Limit	This limit is for VPC specific resources apart from EC2
4	Flow logs per ENI per region	2	Hard...

AWS Networking Cookbook

By : Satyajit Das, Jhalak Modi

AWS Networking Cookbook

By: Satyajit Das, Jhalak Modi

Overview of this book

Related Content you might be interested in

Current Title:

AWS Networking Cookbook

Practical AWS Networking

Designing AWS Environments

AWS Security Cookbook