A VPC Endpoint is a gateway object within a VPC and can be used to connect privately to AWS public services or other VPC endpoints without the need for Internet Gateway or a public subnet.
Continue reading “[AWS] VPC Endpoints”Author Archives: Pyongwon Lee
IT (Cloud, Web) Development, Philosophy, Economics.
[AWS] VPC Peering
VPC Peering allows direct communication between VPCs (inter-region & cross-account) using OSI Layer 3 (Network). Once the VPCs are connected, 2 VPCs can communicate using private IP addresses.
Continue reading “[AWS] VPC Peering”[AWS] Auto Scaling
Here is the confusing part. AWS provides multiple auto scaling services: notably ASW Auto Scaling and EC2 Auto Scaling.
- AWS Auto Scaling lets you configure and manage scaling for your scalable AWS resources through a scaling plan.
- EC2 Auto Scaling is an AWS service that automatically increases or decreases the number of on-demand instances based on chosen CloudWatch metrics.
[AWS] Load Balancing
Load balancing is a method used to distribute incoming connections across a group of servers or services.
- Elastic Load Balancing (ELB) automates distributing traffic evenly to all instances in multiple AZs within a region.
- Cross Zone Load Balancing allows load balancers to cross multiple AZs.
- SSL can be directly applied to ELB – can help reduce the compute power on an EC2 instance.
[AWS] CloudFront
CloudFront is a Content Delivery Network (CDN) – lower latency, higher transfer speed, and reduced server load. It has built-in DDoS (distributed denial of service) attack protection.
Continue reading “[AWS] CloudFront”[AWS] Route 53
Route 53 configures and manages domains: domain registration, DNS (Domain Name System) service, and health checking. – DNS uses port 53. That is how the name comes from.
Continue reading “[AWS] Route 53”[AWS] DNS
Domain Name System (DNS)
DNS is a process of mapping a human-friendly domain name to an IP address.
- DNS Root Servers: A group of servers to answer the root zone. Top Level Domains (TLDs) are controlled by the root zone database – Internet Assigned Numbers Authority (IANA).
- Domain Registrars: All domain names must be unique. A registrar is an authority that can assign domain names to top-level domains and ensure its uniqueness. Each domain name becomes registered in a central database (WhoIS server).
[AWS] VPC – VPC Flow Logs
This post deals with how to monitor VPC traffics. VPC Flow Logs can capture IP traffic information going from or to the network interfaces in a VPC.
Continue reading “[AWS] VPC – VPC Flow Logs”
Scriptorium 