In AWS, we have VPC. It's an isolated boundary under which your infrastructure resides and your application runs. At VPC level, we defined subnets to further isolate traffic by defining DMZ and MZ zones.
NACL and security groups are used to define ingress and egress traffic. The NACL rule works on the basis of sequence number.
To connect the AWS Cloud with on-premise infrastructure, we have the following different methods:
- VPN connections: In a VPN connection, we create a site-to-site VPN tunnel between an on-premise infrastructure and AWS using customer gateway and VGW. AWS supports almost all the available firewalls on the market for VPN connections.
- Direct Connect: If you want to transfer massive amounts of data to and from the AWS public cloud, there is Direct Connect, which offers a dedicated network connection between the AWS data center and your on-premise infrastructure. If you need to ensure encryption on your direct connection too, you need to create a VPN tunnel between...