welcome back to Backspace Academy in this lecture on AWS Direct Connect which 2
is AWS is service for creating a physical connection between your 3
on-premises network and AWS I'll talk about the networking concepts involved 4
in doing a direct connect connection I'll talk about an example the 5
connection process that is involved to setup a connection and also the concept 6
of virtual interfaces so AWS Direct Connect is a dedicated network 7
connection between your on-premise network and AWS this is something to 8
consider if you are a medium to large organization or even if you are a small 9
organization that requires high-speed access to your AWS infrastructure from 10
your on-premises network you do that through connecting to an AWS Direct 11
Connect location or you can use an AWS partner and you do that over a standard 12
one gigabit or 10 gigabit ethernet fiber-optic cable there are sub 1g 13
connections available but they are only available through AWS partners and it 14
uses industry standard 802.11 n high-level talk about networking we're 15
not going to go into route tables we're not going to go into bgp protocol or 16
anything like that that's really the domain of a professional level 17
certification and we're just looking at an associate level certification it's 18
going to be very high level very simple so of the basic things we need to 19
understand that there is a Virtual Private gateway will be required at your 20
VPC and there will be a customer router required at your premises 21
this connection can be partitioned into multiple virtual interfaces and this 22
allows the separation of public and private traffic so we can have a public 23
virtual interface which would allow access to our public IP address space 24
that is used by for example an Amazon s3 bucket or we can have or and or we can 25
have a private virtual interface that can allow access to our private IP space 26
inside our virtual private cloud we should also consider having redundancy 27
set up by having failover to a standard VPN connection here we have a very 28
high-level example of what direct connect looks like if it's connected to 29
our customer network here we can see we have in the blue our private virtual 30
interface and in the red we have our public virtual interface looking at our 31
public virtual interface here in the red it's going to connect our customer DMZ 32
through to our customer router and then on to our partner router or on to our 33
direct AWS direct connect router out to our public IP address space within that 34
AWS infrastructure and on the private virtual interface in blue we can see 35
that's going to connect our on-premise private network through again through 36
our customer router on through to the AWS connect router to our private IP 37
space in our virtual product cloud so that's a very high-level overview 38
of AWS direct connect the connection process for establishing a direct 39
connect connection involves first going to the AWS management console and 40
creating a connection request once that request is confirmed you will then be 41
able to download your letter of authorization from the AWS management 42
console once you have that letter of authorization you can then provide that 43
to your APN partner or service provider who will then establish that connection 44
for you then once that connection is up and running you can use the management 45
console to then configure one or more virtual interfaces to establish network 46
and connectivity between your on-premise and your AWS infrastructure so once you 47
have your direct connection ation up and running you can then create public or 48
private virtual interfaces so this is the process that you would go through 49
from a reasonably high level perspective which is all you would need to know for 50
the associate level certification the first part of that process is to go to 51
the management console and then create a virtual interface within the from the 52
management console and you select either public or private in that process you'll 53
then be asked to fill out the connection details and the BGP parameters we're not 54
going to talk about BGP parameters here you won't be asked a question on that in 55
the associate level exam it's beyond an associate level certification we're just 56
talking high level here so you would fill out those connected connection 57
details the BGP parameters then you can download your configuration file for 58
your own router once you've done that and you have configured your router you 59
think can create a route to the virtual private to your VPC on AWS and you need 60
that to establish connection between the two so so that involves first going into 61
again the management console and enabling route propagation to the 62
virtual private gateway and then you can create a route in your subnet route 63
tables for each individual subnet to your virtual private gateway so that 64
brings us to the end of this lecture on Direct Connect I'll see you in the next 65
lesson