Module-3 -AWS Networking and Content

Delivery
 Content Delivery Network (CDN)
• CDN can stand for Content Delivery Network or Content Distribution Network.
• A Content Delivery Network (CDN) is a geographically distributed network of
servers that work together to provide fast delivery of Internet content.
• The servers are intentionally placed at various locations across the globe to cache and
serve content from the closest possible location to each user.
• This reduces latency and improves performance by bringing the content closer to the
users requesting it.
• CDNs are designed to serve a wide variety of content, including web objects (text,
graphics, scripts), downloadable objects (media files, software, documents),
applications (e-commerce, portals), live streaming media, and social networks.
How Do CDNs Work?
Key Benefits of Using a CDN
AWS Networking and Content Delivery
 Amazon VPC (Virtual Private Cloud)
• Amazon Virtual Private Cloud (VPC) is a service that enables you to launch AWS resources
within a virtual network that is logically isolated and fully customizable to your
specifications.

• It is a virtual network closely like a traditional network that you'd operate in your own data
center, but with the scalability and benefits of using the AWS infrastructure.

• With Amazon VPC, you have complete control over your virtual networking environment,
including selection of your own IP address range, creation of subnets, and configuration of
route tables and network gateways.

• You can customize the network configuration to fit your specific business needs.
Benefits of Amazon VPC
 Amazon VPC Components
Subnets
• A subnet is a range of IP addresses within your VPC.

• A subnet is tied to a single Availability Zone.

• Subnets can be public (accessible from the internet) or private (not accessible from the
internet.

Route Tables
Route tables determine where network traffic from your subnets is directed

Each subnet must be associated with a route table

The route table specifies the allowed routes for outbound traffic from the subnet
 Amazon VPC Components
Internet Gateway
• Allows communication between your VPC and the internet

• Provides a target in your VPC route tables for internet-routable traffic.

NAT Gateway
• Allows instances in a private subnet to connect to the internet or other AWS services,
but prevents the internet from initiating connections with the instances.

• NAT gateways are fully managed by AWS and provide better availability and
bandwidth than NAT instances.
 Amazon VPC Components
Security Groups

• Act as a virtual firewall for your instances to control inbound and outbound traffic

• Can specify allow rules, but not deny rules.

• Are stateful - if you send a request from your instance, the response traffic is allowed

to flow in regardless of inbound rules.

Amazon VPC Components
VPC Subnets
VPC Subnets
VPC Subnets - Types
VPC Subnets
Route Tables
 Route Tables
• A route table contains a set of rules, called routes, that determine where
network traffic from your VPC is directed.
• Each route specifies a destination and a target.
• The destination is the range of IP addresses where you want traffic to go
(destination CIDR), and the target is the gateway, network interface, or
connection through which to send the traffic.
• Each subnet in a VPC must be associated with a route table, which controls
the routing for the subnet.
• A subnet can only be associated with one route table at a time, but a route
table can be associated with multiple subnets.
 Route Tables
• Default route table: Each VPC comes with a default route table. If you
create a subnet in a VPC, the subnet is automatically associated with the default
route table. The default route table ensures that subnets in a VPC can
communicate with each other.
• You can add routes to, delete routes from, and modify routes in the default route table,
but cannot delete the table.

• When you create a VPN, Cloud Connect, or Direct Connect connection, the default
route table automatically delivers a route that cannot be deleted or modified.
 Route Tables
• Custom Route Table:
• A route table that you create for your VPC in addition to the main route table.

• Routes:

• Each route table contains a local route for communication within the VPC.

• You can add additional routes to direct traffic to other destinations, such as an
internet gateway, virtual private gateway, NAT gateway, VPC peering
connection, etc.

• Subnet Associations: Each subnet must be associated with a route table, either
explicitly or implicitly with the main route table
 Security Group
A security group acts as a virtual firewall for your EC2 instances to control incoming and outgoing
traffic.
Security groups operate at the instance level, not the subnet level. You can specify allow rules, but not
deny rules.
Key points:
Allow Only – You can only make allow rules, not block rules.
Controls Access – You decide
Which ports are open (like 80 for websites, 22 for SSH)
Which IP addresses can connect
What kind of traffic can leave the server
Stateful – If your server talks to something, the reply is automatically allowed in, even if you didn’t
make a special inbound rule.
Default Outbound – By default, all outbound traffic is allowed unless you change it.
Default Block – Anything not explicitly allowed is blocked automatically.
Security Group Rules
Security Group
VPC Peering
VPC PEERING
VPC PEERING
AWS Direct Connect
 AWS Direct Connect

• AWS Direct Connect is a cloud service that establishes a dedicated private

network connection between your on-premises data center, office, or

colocation environment and AWS.

• This connection bypasses the public internet, providing a more consistent

network experience, reducing costs, and increasing bandwidth throughput.

Key Features
Key Features
How AWS Direct Connect Works
Use cases of AWS Direct Connect
Amazon CloudFront
 Amazon CloudFront
• AWS CloudFront is a content delivery network (CDN) that delivers data, videos,
applications, and APIs quickly and securely to users globally.

• It accelerates the global delivery of both static and dynamic web content, including HTML,
CSS, JavaScript, and image files, ensuring faster and more efficient access for users
worldwide.

• By leveraging a worldwide network of data centres known as edge locations, CloudFront

ensures that content is delivered with low latency and high transfer speeds.

• CloudFront integrates with other AWS services to provide developers and businesses with a
reliable and scalable solution for content delivery.
Key Features
Benefits of Amazon CloudFront
 How Does AWS CloudFront Work?

Serve user request

How Does AWS CloudFront Work?
Use Cases
 AWS CloudFront vs. AWS Direct Connect
Feature / Aspect AWS CloudFront AWS Direct Connect
Content Delivery Network Dedicated Network Connection
Purpose
(CDN) to AWS
Establish private, high-
Distribute static/dynamic
Main Use Case bandwidth, low-latency
content (e.g., websites, videos)
connection to AWS
Web traffic (HTTP/HTTPS) Private traffic (all protocols)
Traffic Type
from end-users between on-prem and AWS
Reduces latency via private
Reduces latency by caching at
Latency Optimization connection (not over public
global edge locations
internet)
Enterprises with hybrid cloud,
Websites, video streaming
Common Users data migration, or low-latency
platforms, SaaS apps
needs
Integrated with S3, EC2, API Integrated with VPC, Direct
Integration
Gateway, Media Services Connect Gateway
 Used for large data transfers or
Serves cached content to reduce
Bandwidth Usage consistent high-throughput
origin load and bandwidth
needs

Uses TLS, integrated with WAF, Private line; can be combined

Security
Shield, IAM, signed URLs with VPN for encryption

Reduces cost by caching content Typically, cheaper for large

Data Transfer Cost
at the edge volumes than standard internet

Point-to-point connection
Globally distributed edge
Deployment Scope between your data center and
locations
AWS

Supports CloudFront
Edge Computing No compute at the edge
Functions and Lambda@Edge