Please enable JavaScript.

Coggle requires JavaScript to display documents.

AWS SAA Network - Coggle Diagram

- - - - allowing you to immediately deploy instance
      - route out to the internet.(mean all internet accessible)
      - Each EC2 instance has both a public and private IP address
      - 同時會把Network ACL & Route Table 建好
      - It won’t create any subnets, nor will it create a default internet gateway.
  - - - Subnet (public subnet)
      - Create EIP
  - - - Default ACL allow all outbound and inbound 通過
    - - 每個ACL 都是拒絕deny所有inbound 及outbound
  - - - VPC
      - Subnet
      - Network Interface Level
    - - Traffic generated by instances when they contact the Amazon DNS server.
      - Traffic generated by a Windows instance for Amazon Windows license activation
      - Traffic to and from 169.254.169.254 for instance metadata
      - DHCP traffic.
      - Traffic to the reserved IP address for the default VPC router
  - - - build public virtual interface
      - VPN Customer Gateway
      - VPN Virtual Private Gateway
    - - Aggregate multiple DX connection to give a maximum of 40 G bandwidth
  - - - Static IP address
        
        1.2.3.4
        
        5.6.7.8
      - Accelerator
        
        An Accelerator directs traffic to optimal endpoints over the AWS global network to improve the availability and performance of your internet applications.
        
        Each accelerator includes one or more listeners
      - DNS Name
        
        Global Accelerator assigns each accelerator a default DNS name
      - Network Zone
        
        similar to an AWS Availability Zone
      - Listener
      - Endpoint Group
      - Endpoint
  - - - Interface Endpoint
        
        Is an elastic network interface with private IP address that serves as an entry point for traffic destined to a support service
        
        ex. Amazon API Gateway, EC2….
      - Gateway Endpoints
        
        Support Amazon S3 ,DynamoDB
  - - - VPC Peering適合兩個VPC之間多個EC2 instance 之間的雙向通信,最多支援125個
      - PrivateLink 適合單向通信,可以支援數千個customer VPC
  - - - VPC Peering
        
        number of VPC's to be connected is less than 10
        
        Max limit 125 peering connections per VPC.
      - Transit Gateway
        
        One transit gateway in a given region
        
        Use AWS Resource access manager to share a transit gateway for connecting VPCs access multiple account
  - - - Create a single virtual private gateway
      - Create multiple customer gateways, each with the public IP address of the gateway
        
        Use a unique Border Gateway Protocol (BGP) Autonomous System Number (ASN) for each customer gateway
      - Create a dynamically routed Site-to-Site VPN connection from each customer gateway to the common virtual private gateway.
      - Configure the customer gateway devices to advertise a site-specific prefix (such as 10.0.0.0/24, 10.0.1.0/24) to the virtual private gateway.
      - 5.Configure the routes in your subnet route tables to enable instances in your VPC to communicate with your sites.
  - - - Security with IPsec connection
      - High performance network
    - - can be used to carry traffic on both VPN endpoints
      - Increasing performance & faster data transfer
      - Need to be enabled on Client end devices not on VGW end
- - - - DNS record is cached on either the Resolving Server or the users own local PC is equal to the value of the TTL
      - Default TTL is 48 hours
    - - Cloudfront
      - EC2
      - Elastic Beanstalk
        
        幫你建立application, monitor, sqs, autoscaling
      - ELB
      - RDS
      - S3
      - WorkMail
    - - CloudTrail
        
        capture information about every request that is sent to the Route53 API by your AWS account
      - Cloudwatch
        
        Monitor the status - healthy or unhealthy
      - Route53 Dashboard
    - - Endpoint
      - state of cloudwatch alarm
  - - - used to resolve one domain name to another
        
        http://m.acloud.guru point to http://mobile.acloud.guru
      - record maps a name to another name. It should only be used when there are no other records on that name
    - - record maps a name to another name, but can coexist with other records on that name
    - - maps a name to one or more IP addresses(FQDN point IP)
    - - redirects the name to the target name using the HTTP 301 status code
  - - - Route 53 returns all values to the user in a random order
      - 沒有health check的概念
    - - Split your traffic based on different weights assigned
    - - Allow you to route your traffic based on the lowest network latency for your end user.(i.e which region will give them the fastest response time)
    - - Primary Role/Secondary Role
    - - Choose where you traffic will be sent based on the geolocation location of your users
    - - Similar to simple routing however it allows you to put health checks on each record set
      - 有health check的概念