The Ultimate AWS Networking Training Course: All In One

Explore the differences between IPv4 and IPv6, detailing 32-bit versus 128-bit address schemes, octets and hex notation, and methods to shorten IPv6 addresses.

Discover how CIDR notation defines IP address ranges in AWS VPCs, freezing leading bits and calculating 2^n addresses—from /8 to /28—and applying ranges to VPCs, subnets, security groups, and NACLs.

Explore private network ranges not publicly routable, such as 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16. Understand how NAT or proxies enable internet access for private networks in a VPC with subnets.

Explore how AWS VPC creates logically isolated networks per account and region, enabling high availability with multiple availability zones, VPC peering, security groups, and VPN connectivity.

Discover how to create a VPC with AWS and intentionally use multiple VPCs to isolate development, testing, production, and departments, with peering and shared services as needed.

This lecture demonstrates creating AWS VPCs: a microservices VPC with internet gateway and IPv6, and a data-store VPC for Cassandra or MongoDB without internet access, using CIDR planning and automation.

Design subnets per availability zone to achieve high availability and fault tolerance, isolating public load balancer and private application and database tiers within a VPC.

Create subnets in the microservices vpc across availability zones in us east 2 ohio, with public subnets for load balancers and private subnets for container clusters using 10.0.0.0/24 and 10.1.0.0/24.

Create public and private subnets across three availability zones and two tiers using /24 CIDR blocks, and automate the process for repeatability, reliability, efficiency, and security in AWS networking.

Explain how routing in a VPC directs traffic between subnets and to destinations using route tables, including the main and implicit associations, local versus external traffic, and why flow matters.

Enable internet access for a VPC by creating an internet gateway, attaching it to the VPC, configuring a 0.0.0.0/0 route, and associating the route table with public subnets.

Explore how public IPv4 addresses are assigned in Amazon VPC, comparing auto assigned and elastic IPs, their transient or static nature, and NAT mapping to private IPs.

Learn how Amazon VPC assigns IPv6 addresses, with public routable /56 VPC ranges and /64 subnets, and use the IP ranges JSON to programmatically update security groups and firewalls.

Create and attach an internet gateway for the microservices VPC. Then configure a public route table with IPv4 and IPv6 routes and enable auto assign IPs on public subnets.

Explore hybrid subnets that enable outbound internet access with a NAT gateway for IPv4 and an egress-only internet gateway for IPv6, using route tables and elastic IPs.

Configure a nat gateway in a public subnet and an egress-only internet gateway for private subnets. Enable ipv4 and ipv6 routing, and consider third-party appliances.

Create VPC endpoints to enable private connectivity between EC2 and services like S3 and DynamoDB. Configure per VPC endpoints and route tables for private, bidirectional access, avoiding internet exposure.

Apply security in layers across account, network, and host levels using routing, network ACLs, security groups, and OS level protections within AWS VPC.

Discover how network access control lists, applied to the subnet, act as stateless firewalls requiring ingress and egress rules, and why you should customize the default network access control list.

Create two network access control lists for separate subnets in a VPC to tailor inbound and outbound ports, enforce default deny, and allow web, VPN, and ephemeral response ports.

Create and apply a custom network ACL for public subnets, open port 80 and 443 for IPv4 and IPv6, and allow ephemeral response ports to support NAT and egress gateways.

Discover how security groups provide stateful access control for AWS instances, with functional rules and security group references to open required ports like 80, 443, 3306.

Create security groups in the US console for a microservices VPC, assign groups to the app load balancer and API, and open ports 80 and 443 with default inbound denied.

Learn to configure AWS security groups for a load balancer and backend cluster, using stateful outbound rules and ephemeral ports with security group references for tight, two-way control.

Learn how VPC peering connects two VPCs within the same region, requires non-overlapping IP ranges, and remains a one-to-one, non-transitive connection.

Establish a one-to-one VPC peering connection between two VPCs, configure routes for bidirectional communication, and note that transitive peering is not supported; A cannot reach C through B.

Learn how to set up a VPC peering connection between microservices VPC and data stores VPC, configure route tables, and enable bidirectional routing for secure, isolated workloads.

Explore AWS VPN options to extend on-premises networks into the VPC. Learn hardware VPN, Direct Connect, VPN Cloud Hub, and IPsec routing with BGP.

Learn to build aws hardware vpn by configuring virtual private gateway and customer gateway. Set up vpn connection with static routing to access data stores over encrypted private IP traffic.

Configure an AWS hardware VPN with strongSwan to establish a site-to-site connection between on-premises networks and the data stores VPC, including IPsec tunnels, pre-shared keys, and route propagation.

Builds a hub-and-spoke VPN network with a virtual gateway to a VPC and enables remote offices to connect via non-overlapping IP ranges, while software VPN on EC2 offers alternatives.

Establish a private direct connect from on-premises to an AWS region, enabling private connectivity to a VPC via private virtual interfaces and access to AWS services.

Review the default vpc per region per account with an internet gateway, auto-assigned public ips, and routing, and learn how elastic network interfaces support ec2 networking and related use cases.

Enable enhanced networking with SR-IOV on EC2 instances to achieve higher bandwidth and lower latency for Cassandra or MongoDB, with drivers and Elastic Network Adapter up to 20 Gbps.

Enable jumbo frames to boost network efficiency by increasing the mtu to 9001 bytes, reducing frame overhead within the vpc, while noting fragmentation risks when leaving the vpc.

Learn how placement groups minimize latency by keeping EC2 instances in the same availability zone with private IPs, and how DHCP option sets enable config for DNS and Active Directory.

Explore Amazon Virtual Private Cloud by creating logically isolated networks and subnets. Enable various forms of internet access, achieve a secure and performant network, and access resources from on premises.