I believe everyone has used Amazon's EC2 service, but I guess we know VPC is not a lot, let's take a look at the official introduction:
Amazon Virtual Private Cloud (Amazon VPC) lets you to provision a private, isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS, in a virtual network, you define.
The services supported by VPC are:
EC2
Rds
S3
Simpledb
Elb
In the Amazon series, I'll tell you about the installation and configuration tutorials for EC2 RDS S3 Elb. OK, let's take a look at the installation and use of VPC.
1. Enter Amazon Admin page first
2. In the upper left corner of the page, click Services to see the Pull-down menu, select VPC
3. Into the VPC Management page, click Get started creating a VPC button
Then go to the following page and select the network structure
Here we select the third item, confirm the error after dot continue
4. Set up VPN
The VPN is set up here to connect to the back-end network.
IP address: Is the VPN's extranet IP addresses.
5.VPC Network Environment settings
IP CIDR block is set to: 10.0.0.0/16 (which network segment you want to use as a VPC, not with the internal use of the network segment has to repeat, please check with your network leaders first OH)
Public Subnet set to: 10.0.0.0/24 (VPC external network segment)
availability Zone Select AP-NORTHEAST-2A
Private Subnet set to: 10.0.1.0/24 (VPC Internal network segment)
availability Zone Select as ap-northeast-2b
OK, Dot Create VPC
completes the point close
6. Look at the subnets, to remember the subnet id/availability for public/private subnet. Zone
Let's take a look at the 2 Subnet routing table contents:
① This is external:
Elb and S3 are set to this 10.0.0.0/24 segment, and we will teach you how to do it in the later configuration.
② This is internal:
EC2 and RDS DB are all placed in this 10.0.1.0/24 network segment.
③ to create a private Subnet network segment, set to 10.0.2.0/24, click Create Subnet
Choose Availability Zone as AP-SOUTHEAST-2B, as we define ap-southeast-2b for private Subnet, yes,create.