O'Reilly logo

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

AWS Networking Cookbook

Book Description

Over 50 recipes covering all you need to know about AWS networking

About This Book

  • Master AWS networking concepts with AWS Networking Cookbook.
  • Design and implement highly available connectivity and multi-regioned AWS solutions
  • A recipe-based guide that will eliminate the complications of AWS networking.
  • A guide to automate networking services and features

Who This Book Is For

This book targets administrators, network engineers, and solution architects who are looking at optimizing their cloud platform's connectivity. Some basic understanding of AWS would be beneficial.

What You Will Learn

  • Create basic network in AWS
  • Create production grade network in AWS
  • Create global scale network in AWS
  • Security and Compliance with AWS Network
  • Troubleshooting, best practices and limitations of AWS network
  • Pricing model of AWS network components
  • Route 53 and Cloudfront concepts and routing policies
  • VPC Automation using Ansible and CloudFormation

In Detail

This book starts with practical recipes on the fundamentals of cloud networking and gradually moves on to configuring networks and implementing infrastructure automation. This book then supplies in-depth recipes on networking components like Network Interface, Internet Gateways, DNS, Elastic IP addresses, and VPN CloudHub. Later, this book also delves into designing, implementing, and optimizing static and dynamic routing architectures, multi-region solutions, and highly available connectivity for your enterprise.

Finally, this book will teach you to troubleshoot your VPC's network, increasing your VPC's efficiency. By the end of this book, you will have advanced knowledge of AWS networking concepts and technologies and will have mastered implementing infrastructure automation and optimizing your VPC.

Style and approach

A set of exciting recipes on using AWS Networking services more effectively.

Downloading the example code for this book. You can download the example code files for all Packt books you have purchased from your account at http://www.PacktPub.com. If you purchased this book elsewhere, you can visit http://www.PacktPub.com/support and register to have the code file.

Table of Contents

  1. Preface
    1. What this book covers
    2. What you need for this book
    3. Who this book is for
    4. Sections
      1. Getting ready
      2. How to do it…
      3. How it works…
      4. There's more…
      5. See also
    5. Conventions
    6. Reader feedback
    7. Customer support
      1. Downloading the example code
      2. Downloading the color images of this book
      3. Errata
      4. Piracy
      5. Questions
  2. Getting Started with AWS Networking Components
    1. Introduction
      1. Various AWS network services
    2. Creating an account in AWS
      1. Getting ready
      2. How to do it...
      3. There's more...
    3. Creating an admin user in AWS
      1. Getting ready
      2. How to do it...
      3. There's more...
    4. Creating a VPC and a subnet with IPv6
      1. Getting ready
      2. How to do it...
    5. Creating an EC2 with an IPv6 address
      1. Getting ready
      2. How to do it...
      3. How it works...
    6. Creating NAT on EC2 instance
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    7. Working with network interfaces
      1. Getting ready
      2. How to do it...
    8. Configuring AWS CLI
      1. Getting ready
      2. How to do it...
  3. Building Your Own Custom VPC
    1. Introduction
    2. Managing a VPC
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    3. Managing public and private subnets
      1. Getting ready
      2. How to do it...
      3. There's more...
    4. Managing a Network ACL
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    5. Managing a Security Group
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    6. Managing an Internet Gateway
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    7. Managing a NAT Gateway
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    8. Managing a Route Table
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    9. Managing EC2 instances
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
  4. VPC Advanced Components
    1. Introduction
    2. Assigning multiple IPs to an instance and ENI
      1. Getting ready
      2. How to do it...
      3. There's more...
    3. Accessing an instance within the network
      1. Getting ready
      2. How to do it...
      3. How it works...
    4. Accessing an instance from outside AWS
      1. Getting ready
      2. How to do it...
    5. Creating an application ELB
      1. Getting ready
      2. How to do it...
      3. How it works...
      4. There's more...
    6. Creating a launch configuration
      1. Getting ready
      2. How to do it...
      3. There's more...
    7. Creating an Auto Scaling group
      1. Getting ready
      2. How to do it...
      3. There's more...
    8. Creating VPC peering
      1. Getting ready
      2. How to do it...
    9. Accepting VPC peering
      1. Getting ready
      2. How to do it...
      3. There's more...
        1. Configuring routes between multiple VPCs peered together
        2. Limitations of VPC peering connection
        3. Controlling access to VPC peering connections
    10. Configuring VPN connections to your Amazon VPC
      1. Getting ready
      2. How to do it...
  5. Configuring Global Scale Infrastructure
    1. Introduction
    2. Creating a VPC and subnet from the CLI
      1. Getting ready
      2. How to do it...
      3. There's more...
    3. Creating a VPC to DC connectivity--VPN Tunneling
      1. Getting ready
      2. How to do it...
      3. There's more...
    4. Creating a VPC with a private subnet and connecting DC
      1. Getting ready
      2. How to do it...
    5. Creating a multi-region VPC communication
      1. Getting ready
      2. How to do it...
      3. There's more...
    6. Setting up a private DNS with a VPC
      1. Getting ready
      2. How to do it...
      3. There's more...
    7. Migrating to IPv6
      1. Getting ready
      2. How to do it...
      3. There's more...
  6. Working with Infrastructure Automation
    1. Introduction
      1. Infrastructure as a Service
        1. Why do we need to automate?
        2. Infrastructure automation tools 
    2. Creating, storing, and testing the template--CloudFormation
      1. Getting ready
      2. How to do it...
        1. Creating the template
          1. VPC
          2. Subnet
          3. Internet Gateway
          4. Elastic IP
          5. Nat Gateway
        2. Storing the template
        3. Testing the JSON template
      3. There's more...
    3. Creating a new stack--CloudFormation
      1. Getting ready
      2. How to do it...
      3. How it works...
    4. Modify the stack--CloudFormation
      1. Getting ready
      2. How to do it...
        1. Using change sets
        2. Using direct update
    5. Deleting the stack--CloudFormation
      1. Getting ready
      2. How to do it...
      3. There's more...
    6. Setting up Ansible
      1. Getting ready
      2. How to do it...
    7. Installing Ansible
    8. Creating Ansible playbooks for creating VPC
      1. How to do it...
      2. There's more...
  7. Working with Route 53
    1. Introduction
      1. How does Route 53 DNS works?
      2. Supported DNS resource record types
      3. Alias resource record
      4. Routing policies
    2. Registering a new domain
      1. Getting ready
      2. How to do it...
      3. There's more...
    3. Transferring a domain into Amazon Route 53
      1. Getting ready
      2. How to do it...
    4. Creating hosted zones and record sets
      1. Getting ready
      2. How to do it...
    5. Deleting a public hosted zone
      1. Getting ready
      2. How to do it...
    6. Creating an Alias record set
      1. How to do it...
      2. There's more...
    7. Creating a private hosted zone
      1. Getting ready
      2. How to do it...
      3. There's more...
    8. Working with the weighted routing policy
      1. How to do it...
      2. How it works...
    9. Working with the failover routing policy and health checks
      1. How to do it...
      2. How it works...
      3. There's more...
  8. Cloud Security and Network Compliance
    1. Introduction
      1. Types of attack
    2. Setting up CloudFront--EC2 origin
      1. Getting ready
      2. How to do it...
      3. How it works...
      4.  There's more...
    3. Setting up CloudFront--S3 origin
      1. How to do it...
      2. There's more...
    4. Geographic restrictions with Amazon CloudFront
      1. How to do it...
      2. How it works...
    5. Customizing error responses in CloudFront
      1. Getting ready
      2. How to do it...
      3. How it works...
    6. Setting up CloudWatch monitoring
      1. Getting ready
      2. How to do it...
      3. There's more...
    7. Setting up ELB and Auto Scaling
      1. How to do it...
      2. How it works...
    8. Trusted Advisor
      1. Getting ready
      2. How to do it...
      3. How it works...
    9. Protecting log information--sending logs to CloudWatch
      1. Getting ready
      2. How to do it...
      3. There's more...
    10. Starting CloudTrail
      1. How to do it...
      2. How it works...
      3. There's more...
    11. Submitting a penetration testing request
      1. Getting ready
      2. How to do it...
  9. Troubleshooting and VPC Limits
    1. Introduction
    2. Troubleshooting IP address overlapping
      1. Getting ready
      2. How to do it...
      3. There's more...
    3. Errors while connecting an EC2 instance in a VPC
      1. Getting ready
      2. How to do it...
      3. There's more...
    4. Internet not accessible in the instance
      1. Getting ready
      2. How to do it...
      3. There's more...
    5. Internet not accessible in the private subnet instance (NAT Gateway)
      1. How to do it...
    6. Not able to delete a VPC
      1. Getting ready
      2. How to do it...
    7. Enabling VPC flow logs
      1. Getting ready
      2. How to do it...
      3. There's more...
    8. Increasing VPC Limits
      1. Getting ready
      2. How to do it...
  10. Pricing of VPC and Related Components
    1. Introduction
    2. VPC, VPN and Nat Gateway pricing
      1. Getting ready
      2. How to do it...
      3. There's more...
    3. EC2, ELB and Elastic IP pricing
      1. Getting ready
      2. How to do it...
    4. Route 53 pricing
      1. Getting ready
      2. How to do it...
    5. Direct Connect pricing
      1. Getting ready
      2. How to do it...
    6. CloudFront pricing
      1. Getting ready
      2. How to do it...
    7. WAF and Cloud Shield pricing
      1. Getting ready
      2. How to do it...