AWS – Page 18 – Scriptorium

[AWS] VPN and DX

Hybrid cloud architecture combines resources in the cloud with on-premise resources and use them just like all resources are in the same environment. There are a couple of ways to setup communication between AWS VPCs and on-premise networks.

[AWS] Global Accelerator

Global Accelerator is a networking service that improves performance and availability by directing traffic to optional endpoints.

[AWS] Transit Gateway

AWS Transit Gateway is used to simplify your AWS network architecture (topology) by allowing to have transitive peering between hundreds and thousands of VPCs and on-premise data centers.

[AWS] VPC Endpoints

A VPC Endpoint is a gateway object within a VPC and can be used to connect privately to AWS public services or other VPC endpoints without the need for Internet Gateway or a public subnet.

[AWS] VPC Peering

VPC Peering allows direct communication between VPCs (inter-region & cross-account) using OSI Layer 3 (Network). Once the VPCs are connected, 2 VPCs can communicate using private IP addresses.

[AWS] Auto Scaling

Here is the confusing part. AWS provides multiple auto scaling services: notably ASW Auto Scaling and EC2 Auto Scaling.

AWS Auto Scaling lets you configure and manage scaling for your scalable AWS resources through a scaling plan.
EC2 Auto Scaling is an AWS service that automatically increases or decreases the number of on-demand instances based on chosen CloudWatch metrics.

[AWS] Load Balancing

Load balancing is a method used to distribute incoming connections across a group of servers or services.

Elastic Load Balancing (ELB) automates distributing traffic evenly to all instances in multiple AZs within a region.
- Cross Zone Load Balancing allows load balancers to cross multiple AZs.
SSL can be directly applied to ELB – can help reduce the compute power on an EC2 instance.

[AWS] CloudFront

CloudFront is a Content Delivery Network (CDN) – lower latency, higher transfer speed, and reduced server load. It has built-in DDoS (distributed denial of service) attack protection.