VIRTUAL PRIVATE CLOUD(VPC)
INTRODUCTION:
→ Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you’ve defined.
→ A default VPC is created automatically by amazon inside each region for account.
IP ADDRESS:
→ IP address is a unique combination of numbers and periods such as 172.1.1.1.
→ It acts as an identity for the network device when it connects to the internet.
CIDR:
→ CIDR (Classless Inter-Domain Routing) provides method of allocating IP addresses.
→ It contains base ip(ip-10.0.0.0) and subnet mask (defines how many bit can change- /16)
→ First step is to define the CIDR block for VPC.
→ Then assign portions of this CIDR block to individual subnets inside the VPC.
→ For eg: 10.0.0.0/16 (65,536 IP addresses) > 10.0.0.0 – 10.0.255.255
COMPONENTS OF VPC:
-
Subnet: A logical subdivision of larger networks.
-
Public Subnet - resources are exposed to the internet through Internet Gateway.
-
Private Subnet - resources are not exposed to the outside world.
-
-
Route Table: The set of rules used to decide where the network traffic has to be managed. It specifies the destination i.e, IP address . The target can be Internet gateway, NAT gateway, Virtual private gateway, etc.
-
Virtual Private Network - A service that helps to connect VPC and DC through IPSec(Internet Protocol Security) protocol for secure connection.
-
NAT Gateway: Network Address Translation (NAT) Gateway is used when higher bandwidth, availability with lesser management effort is required. It updates the routing table of the private subnet such that it sends the traffic to the NAT gateway. It supports only UDP, TCP, and ICMP protocols.
-
VPC Peering: A VPC peering is a connection between two Vpc using IPv4 private addresses. This connection helps in smooth transfer the data.
-
Security Groups: It consists set of firewalls rules that control the traffic of EC2 instances. A single security group can be associated with multiple instances.
-
Elastic IP: It is a static IP address which is a reserved public IP address that can be assigned to any Instance in a particular region and never changes.
-
Network Access Control Lists (NACL): It is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets. It adds an additional layer of security to your VPC.
-
Network Interface: It’s a connection between private and public networks.
-
VPC Endpoints: It allows VPC to make a connection with other services of AWS without using the internet.