Amazon AWS Learning--VPC Several concepts within the relationship

There are several concepts involved in a VPC:

• Vpc
• Sub-Network
• routing table
• Internet gateways
• Security group

Today we are going to talk about the relationship between the several concepts.

1. VPC

Is the VPC, of course, VPC scope is the largest, VPC is virtual private cloud, is a fictitious LAN.

2. Subnets

VPC is designed to isolate all of your services from the outside world, but the scope is large, and if you need further network partitioning inside your LAN, you need to set up subnets. The subnet is inside the VPC.

3. Routing table

The routing table is created on a VPC and is created with a corresponding VPC selected.

All routing tables created within a VPC will contain a route entry that reaches that VPC and cannot be deleted. You can then add new route items, such as Internet gateways, on this basis.

4. Internet gateways

If you want to surf the internet, Internet gateways are required, and they are also associated to the routing table when they are created. Click Do navigation "Routing table", select an item on the right side of the list, in the Routing tab below you can click "Edit" to add an Internet gateway,

5. Security Groups

A security group is a collection of inbound rules and outbound rules. Security groups are also built on a VPC, and you need to specify a VPC when you create it.

In the left navigation, click on "Security group", select an item in the right list, below you can see the "Inbound rules" and "Outbound rules" tab. The rules for Inbound (VPC) and outbound (VPC) are defined separately in the form of a white list. With the default security group for the EC2 instance, the inbound rule opens Port 22nd, which means that the SSH tool can be used to connect to the instance via port 22nd, and the source labeled "0.0.0.0/0" indicates that the IP of the connection source is not subject to any restrictions.

EC2 The default outbound rule is all traffic, which means that EC2 instances are not restricted to external access,

Copyright NOTICE: This article for Bo Master original article, without Bo Master permission not reproduced.

Amazon AWS Learning--VPC Several concepts within the relationship