AWS Networking Fundamentals book: Table of Contents

Here is the Table of Contents of my AWS Networking Fundamentals book. I have added the figures which illustrate the example scenarios in each chapter. The book is available at Leanpub.com. It is still in progress, and there will be additional chapters soon.

 

Chapter 1: Virtual Private Cloud - VPC 1

VPC 1

VPC Introduction 1

The Structure of Availability Zone 2

Create VPC - AWS Console 4

Select Region 4

Create VPC 7

DHCP Options Set 9

Main Route Table 10

VPC Verification Using AWS CLI 12

Create VPC - AWS CloudFormation 16

Create Template 17

Upload Template 17

Verification Using AWS Console 18

VPC Verification using AWS CLI 21

Create Subnets - AWS Console 23

Create Subnets 24

Route Tables 29

Create Subnets – AWS Console 30

Create Subnets - AWS CloudFormation 37

Create Network ACL 40

 

Chapter 2: VPC Control-Plane 43

VPC Control-Plane – Mapping Service 43

Introduction 43

Mapping Register 43

Mapping Request - Reply 44

Data-Plane Operation 45

References 46

 

Chapter 3: VPC Internet Gateway 47

Introduction 47

Allow Internet Access from Subnet 48

Create Internet Gateway 49

Update Subnet Route Table 54

Network Access Control List 57

Associate SG and Elastic-IP with EC2 59

Create Security Group 59

Launch an EC2 Instance 65

Allocate Elastic IP address from Amazon Ipv4 Pool 71

Reachability Analyzer 81

Billing 85

 

 

Chapter 4: VPC NAT Gateway 87

Introduction 87

Create NAT Gateway and Allocate Elastic IP 89

Add Route to NGW on Private Subnet Route Table 94

Test Connections 97

Billing 101

 

Chapter 5: Virtual Private Gateway - VGW 103

Introduction 103

Customer Gateway (CGW) 105

Create CGW 106

Virtual Gateway (VGW) 109

Create CGW 109

Attach CGW to VPC 110

Route Table Propagation 113

Edit Route Table Route Propagation 113

VPN Connection 115

Edit Route Table Route Propagation 115

CGW Configuration 119

Download CFG File 119

Configure CGW Device 126

Tunnel Verification 128

Control-Plane Verification 132

Data-Plane Verification 134

Billing 135

 

Chapter 6: Transit Gateway 137

Introduction 137

Create Transit Gateway 139

Launch TGW 140

Create Transit Gateway Attachment 144

Update Subnet Route Tables 150

Data-Plane Testing 152

Create VPN Connection 153

Configure VPN on TGW 154

Configure VPN on CGW 159

Control-Plane and Data-Plane Verification 160

Transit Gateway Pricing 165

 

Chapter 7: VPC Segmentation with Transit Gateway 167

Introduction 167

Create Route Table for Attachments 173

Create TGW Route Table 174

Detach Attachments from the Default RT 176

Associate Attachments with RT 178

Route Table Propagation 180

Create Propagation 181

Summary 192

 

Chapter 8: Transit Gateway Peering 193

Introduction 193

Create TGW Peering 195

TGW Peering Connection Request (Stockholm-TGW) 195

TGW Attachment - London: Accept 199

RT of Stockholm-TGW 201

RT of London-TGW 203

RT of TGW-London-VPC-RT 205

RT of TGW-London-VPN-RT 205

RT of Stockholm-EC2-RT 206

RT of NWKT-Prod-Public 207

Verify IP Connection 207

TGW Peering Pricing 208

Summary 209

 

Chapter 9: VPC Peering 210

Introduction 210

Configure VPC Peering 212

Update Route Tables 217

Test Connectivity 222

 

Chapter 10: AWS PrivateLink 225

Introduction 225

Create Network Load Balancer 226

Create Endpoint Service 237

Create Endpoint 241

Connection Verification 249

Billing 253

 

Chapter 11: Dedicated Direct Connect & Transit VIF 255

  Introduction 255

  Dedicated Direct Connect Connection 255

    Direct Connect Ordering Process 256

    Create Direct Connect Gateway 264

    Create Transit Virtual Interface 267

    Configure BGP Peering Between Routers 272

    Associate TGW with Direct Connect GW 273

Direct Connect Gateway – Traffic Flow 276

Figure 11-1: AWS Dedicated Direct Connect Connection & Transit Virtual Interface.

Chapter 12: Hosted Direct Connect 277

Introduction 277

   Network Edge 278

   BGP EVPN Control Plane Operation 278

   VXLAN Data Plane 282

Figure 12-1: AWS Hosted Direct Connect Connection – EVPN Control Plane.

Chapter 13: Direct Connect BGP Policy 285

 Introduction 285

 BGP Route Selection Process 285

  DXGW Egress Policy - BGP Summary Route 287

  DXGW Egress Policy – BGP AS-Path Prepend 288

  DXGW Egress Policy - BGP Communities 290

  On-Prem DC Egress Policy 292

 

Figure 13-1: DXGW’s BGP Egress Policy – Default BGP Process.