Here you are.
And welcome back now into this video we'll be discussing about the interfacing points now before we
go ahead and discuss more about the let's quickly revise one of their down side of the gate.
Will we be seeing point?
So in this type of approach, the VPC in point was created outside of the VPC.
So as we were discussing, you have what you see two things in a VPC.
And again, the main point is outside of the BBC and the traffic room is due to the VPC end point was
controlled to the round tables.
And because of this type of architecture, there were a lot of limitations, like you cannot really
go ahead and connect directly from VPN or Direct Connect and various other services.
So the next generation of the webzine points are the interface points.
So an interface endpoint is basically an elastic network interface with a private IP address from the
IP address range of your subnet.
So now what will happen?
Let's say you want to connect to the S3 Service or Rescue Service or any other A.W. services which are
supported privately.
Then you wrote the traffic to the interface VPC endpoint.
So this interface VPC endpoint is within the same VPC and also has the same IP address range as part
of your subnet and this access entry point to the traffic which are destined towards the services.
So as the name suggests, this is nothing but an elastic network interface that is created.
Now before we go ahead and proceed further, let's quickly look into it in a demo perspective so that
our concept is much more clear.
So currently for today's video, you see that I have an interface endpoint or another endpoint type.
I have an interface endpoint that is created and the service to which this interface endpoint is associated
with is an easy to service here.
Now, from the easy to console, if we go back down, you have our network interfaces and there are
multiple network interfaces here, as we're discussing in that space and what is nothing but a network
interface.
So it will quickly look into the interface endpoint details.
And if we quickly go to the subnet, you see that this interfacing point is associated with multiple
subnets and these are the network interface.
So let's open up one among them.
So this is the exact network interface idea warrior.
Let's look into the details.
So under the interface type, you will see that it is a webcam point here.
Now for today's demo, I have to see two instances that are available.
Both are within the public subnet and one is associated with the interface endpoint.
So this one is associated with the interface endpoint.
And the second is to again, it is in a different public subnet, but it is not associated with the
interface endpoint.
So we will connect to both of them and we look into how the traffic is routing towards the A.W. service.
So first, let's go ahead and connect to the first instance, which is not associated with the interface
endpoint.
So from the SSA terminal, let me go ahead and quickly connect here.
In fact, we'll go ahead and use multiple tabs because I wanted to show you the network connection through
Peacebuilders.
Great, now, when you quickly do it, it's easy to describe instances.
Let's also specify the region of USD one just for them.
All right.
So it is basically giving certain output with the details of the two instances that are running now
in order to quickly verify to which IP address this API call is made.
Let's go ahead from a different that will be Equidome towards the destination port of 440 olate.
So it is capturing traffic.
Let's go ahead and render easy to describe instances yet again.
And now if you will see the traffic from this specific instance with a 172, 31, 36 or so, it will
verify 172, 31, 36 dot 89 year.
It is going towards a public IP, which is 52, 46, 146 DOT 93.
So this is basically a public IP of the A.W. same point.
So this we have made a query to the SC to End Point Doriot.
So this is one part now as we're discussing, we can also go ahead and associate it with the interfacing
point and then all the traffic will go towards the interfacing point.
There is no need of having a direct Internet connection.
So for this, I also have one more easy to instant's over here.
And let's go ahead and try the same demo here.
So let me go ahead and copy the public IP.
I quickly logout from the first AC2 instance.
Let's go ahead and connect to the second NICITA now and let's also copy this up.
Let's log out and let's connect in that second terminal.
Perfect.
So even in this easy to quickly, do you see two describe instances with the region of us?
E one, as expected, things are working well.
So now let's go ahead and run the DCP Down command yet again on their destination, Portal four, four,
three.
And let's do it easy to describe instances.
And now from our TCP again, you'll see that the traffic is going towards a public endpoint.
So this is primarily because we had explicitly specified the regional area and the region is USD two
one.
So this is a different region from which the interface end point is created.
So now if we change this region, let's say, because this region is primarily deep northeast three.
So let's do one thing.
Let's change the region to EBP, Northeast three, let's do a control C and let's run the DCP Dunkleman
yet again.
Let's play center.
And this time you will see that the traffic is going towards an interface endpoint, which is 172,
31, 18 or 23.
So if you want to quickly verify that, let's go to the subnet.
You will see that this is the interface.
Eighteen point two is that traffic is redirected to which is 172, 31, 18, dot 133.
All right.
So from the easy to the traffic goes to the interface end point from the interface endpoint, then through
the established private network, the traffic is redirected to the appropriate service.
So not only you can go ahead and take the benefit of interfacing, but only for the private subnet.
But as we look into today's demo, you can also associate interface endpoint in the public subnet.
And depending upon the region where you make a query to the traffic will either go through the Internet
gateway or it will go to the interface endpoint.
And everything is very seemingly so you do not really need to worry about anything there.
So before we conclude, let's look into some of the benefits of interface endpoint.
First one is that the revision point enables the use of security group to restrict access to the end
point.
Now, since this is a unit available, a security group will be associated with that.
So certain security group level also you can go ahead and control, which is the source IP that is allowed
to connect to the BBC.
So if I have to quickly show you, if we'll see, you have a security group and you have a security
group named Default that is associated with it.
Now, if I quickly open this, you have all the traffic that is allowed, but depending upon the customization
that you do, you can restrict a lot of source traffic.
Now, the second benefit, primarily because the interface points are residing in the same VPC, is
that various connections like VPN and Direct Connect are supported here.
And the third one is that the interface point supports a lot of services, unlike the gateway endpoint.
So as we're discussing Gateway and Point, primarily the support a strong dynamo, but there are a lot
of other services for which you might want to prevent connectivity, too.
And that is where the interface interfacing point really comes into the picture.
So let's go back to the endpoint.
So let's create end point and within a year you will see that.
For a lot of services, in fact, let me maximize this, so for a lot of services, you have auto scaling,
your cloud formation, cloud config, Dinamo Debka and so many others, you see the primary Taipei's
interface end point.
And this is one of the great benefits that the interfacing point provides.
That's great.
So I hope that this you understood the basics of interfacing point again for 2D video, we had a slightly
different architecture so that our learning also continues there.
So for today's video, we had used a public two instance and depending upon the region, we looked into
how the traffic is automatically directed towards either Internet gateway or if the traffic is towards
the services in the same region, it is automatically redirected towards the interface points.
So with this will conclude today's video.