Module:3-AWS Networking and
Content Delivery
Amazon VPC (Virtual Private Cloud),
VPC Subnets,
Route Tables,
Security Groups,
VPC Peering,
AWS Direct Connect, AWS Networking and Content
Delivery
Amazon CloudFront
IP addresses
IPv4 and IPv6 addresses
Amazon
VPC
• Enables you to provision a logically isolated section of the
• AWS Cloud where you can launch AWS resources in a virtual
• network that you define
• Gives you control over your virtual networking resources,
including:
– Selection of IP address range
– Creation of subnets
– Configuration of route tables and network gateways
• • Enables you to customize the network configuration for your
VPC
• • Enables you to use multiple layers of security
Amazon VPC
VPCs and subnets
IP addressing
Reserved IP addresses
Public IP address types
Route tables and routes
Security Group
• A security group is a virtual firewall which is
controlling the traffic to your EC2 instances.
• When you first launch an EC2 instance, you
can associate it with one or more security
groups.
• A Security group is the first defence against
hackers.
VPC Peering
• VPC Peering is a networking connection
between two Virtual Private Clouds (VPCs) in
AWS that allows them to communicate with
each other privately as if they were within the
same network, without using public internet
or VPNs.
• A virtual private cloud (VPC) is a virtual
network dedicated to your AWS account.
• It is logically isolated from other virtual
networks in the AWS Cloud.
• You can launch AWS resources, such as
Amazon EC2 instances, into your VPC.
• A VPC peering connection is a networking
connection between two VPCs that enables
you to route traffic between them using
private IPv4 addresses or IPv6 addresses.
• Instances in either VPC can communicate with
each other as if they are within the same
network.
VPC Peering
AWS Direct Connect
• AWS Direct Connect is a cloud service that
enables you to establish a dedicated, private
network connection from your on-premises
data center to AWS, bypassing the public
internet for improved bandwidth, lower
latency, and enhanced security.
• Real-Time ExampleThink of AWS Direct
Connect as a private, high-speed express lane
directly from your office to a cloud data
center, ensuring faster, more secure, and
reliable access to your cloud resources,
without the delays and variability of public
roads (the internet).
Amazon CloudFront
• Amazon CloudFront is a fast content delivery
network (CDN) service that securely delivers
data, videos, applications, and APIs to
customers globally with low latency, high
transfer speeds, all within a developer-friendly
environment.
• Securely deliver content with low latency and
high transfer speeds
Benefits
• Fast and global
• Security at the Edge
Example
• Imagine you have a popular website with
users all over the world. Amazon CloudFront is
like setting up local warehouses (edge servers)
near your users, so when they request content
from your site, they get it quickly from the
nearest warehouse instead of waiting for it to
come all the way from your main
headquarters (the origin server).
AWS Direct Connect provides a dedicated network connection between an on-premises network
and the AWS Cloud, bypassing the public internet.
This offers a more reliable and consistent network experience with potentially lower costs and
higher bandwidth than internet-based connections.
It's a way to establish a private connection to access AWS services like Amazon EC2, Amazon
VPC, Amazon S3, and Amazon DynamoDB.
Physical Cross Connect
Dedicated Connection
Improve application performance by connecting directly to AWS and bypassing the public
internet.
Low rates for transferring data out of AWS may reduce your networking costs compared to other
AWS services.
Protect your data in transit
Hosted Connections
A dedicated connection is made through a 1 Gbps, 10 Gbps, 100 Gbps, or 400
Gbps Ethernet port dedicated to a single customer. Hosted connections are
sourced from a AWS Direct Connect Partner that has a network link between
themselves and AWS.
CDN- Cloudfront
AWS CloudFront is a content delivery network (CDN) service provided by Amazon Web Services (AWS).
It enhances the delivery of websites, APIs, video content, and other web assets by caching content at
edge locations (servers) worldwide, close to users, for faster access.
1.1. Request:
When a user requests content (e.g., a webpage, image, video), the request is routed to the edge location with the lowest latency.
2.2. Cache Hit:
If the content is already cached at that edge location, it's delivered directly to the user.
3.3. Cache Miss:
If the content isn't cached, CloudFront retrieves it from the origin server (e.g., an S3 bucket, a MediaPackage channel, or an HTTP server).
4.4. Caching:
The retrieved content is then cached at the edge location for future requests and also sent to the user.
Pricing
• Amazon CloudFront pricing is based on several factors, including data transfer out, HTTP/HTTPS
requests, and additional features like invalidation requests and Lambda@Edge executions.
• Data Transfer Out
– To Internet: Charged per GB based on the amount of data transferred from CloudFront to users.
– To Origin: Charged per GB for data transferred from CloudFront to your origin servers (e.g., S3, EC2).
• HTTP/HTTPS Requests
– Charged based on the number of HTTP or HTTPS requests made to your CloudFront distribution.
– Pricing may vary by geographic region.
• Invalidation Requests
– The first 1,000 invalidation requests each month are free.
– After that, there is a charge for each additional invalidation request.
• Field-Level Encryption Requests
– Additional charges apply for requests that use field-level encryption.
• Lambda@Edge
– Charged based on the number of requests and the duration of execution for Lambda functions triggered by
CloudFront events.
• Region-Based Pricing
– Pricing varies by region, with specific rates for data transfer and requests.
• Free Tier
– New users can take advantage of the AWS Free Tier, which includes up to 1 TB of data transfer out and 2
million HTTP or HTTPS requests per month for the first 12 months.
Features
Key features
•Edge Locations: CloudFront utilizes a global network of edge
locations to minimize latency.
•Integration with AWS Services: CloudFront integrates
seamlessly with other AWS services like S3, MediaPackage,
and Lambda@Edge.
•Programmability: CloudFront offers features like CloudFront
Functions and Lambda@Edge for customizing content delivery
at the edge.
•Security Features: It supports HTTPS, custom error pages,
and geographic restrictions. Pricing: CloudFront pricing is
based on usage (data transfer out, requests, etc.).
Benefits
•Faster Content Delivery: Reduced latency and
faster loading times for users.
•Improved Website Performance: Optimized for
handling traffic surges and improving overall
website performance.
•Reduced Costs: By offloading traffic from the
origin server, it helps optimize costs.
•Enhanced Security: By caching content and
reducing direct access to the origin, it enhances
security.
•Scalability: CloudFront can handle large amounts
of traffic and scale automatically.
Usecase 1:
One of the most common AWS
architectures for dynamic content
distribution is based on Amazon EC2, an
Auto-Scaling group, and Elastic Load
Balancer (ELB), in this case, Application
Load Balancer (ALB).