Amazon Virtual Private Cloud
Original author(s)Amazon.com, Inc.
Developer(s)Amazon.com
Initial releaseSeptember 25, 2009 (2009-09-25)
Operating systemMicrosoft Windows, Linux, FreeBSD
Available inEnglish
TypeVirtual Private Server
LicenseProprietary software
Websiteaws.amazon.com/vpc/

Amazon Virtual Private Cloud (VPC) is a commercial cloud computing service that provides a virtual private cloud, by provisioning a logically isolated section of Amazon Web Services (AWS) Cloud.[1] Enterprise customers can access the Amazon Elastic Compute Cloud (EC2) over an IPsec based virtual private network.[2][3] Unlike traditional EC2 instances which are allocated internal and external IP numbers by Amazon, the customer can assign IP numbers of their choosing from one or more subnets.[4]

Comparison to private clouds

Amazon Virtual Private Cloud aims to provide a service similar to private clouds using technology such as OpenStack or HPE Helion Eucalyptus. However, private clouds typically use technology such as OpenShift application hosting and various database systems. Cloud security experts warn that there can be compliance risks, such as a loss of control or service cancellation in using public resources[5] which do not exist with in-house systems. If transaction records are requested from Amazon about a VPC using a national security letter they may not be legally allowed to inform the customer of the breach of the security of their system. This would be true even if the actual VPC resources were in another country.[6] The API used by AWS is only partly compatible with that of HPE Helion Eucalyptus and is not compatible with other private cloud systems, so migration from AWS may be difficult. This has led to warnings of the possibility of a lock-in to a specific technology.[5]

IP Addressing

IP Addressing in Amazon Virtual Private Cloud (VPC) refers to the assignment of IP addresses to the resources within a VPC. VPC is Amazon Web Services (AWS) solution for providing isolated network environments for AWS resources. IP addresses in a VPC are used for communication between resources within the VPC, as well as for communication between the VPC and the Internet.

There are two types of IP addresses used in a VPC: private IP addresses and public IP addresses. Private IP addresses are used for communication between instances within the VPC, while public IP addresses are used for communication between the VPC and the Internet.

Amazon VPC provides several options for IP address management, including the use of IPv4 and IPv6 addresses, the automatic assignment of private IP addresses, and the ability to assign static private IP addresses. Additionally, Amazon VPC provides the option to associate Elastic IP addresses with instances to ensure persistent public IP addresses.

By using Amazon VPC, customers can have full control over the network configuration of their AWS resources, providing increased security and isolation compared to the traditional shared-tenancy model of public cloud computing.

Connectivity

AWS VPC allows users to connect to the Internet, a user's corporate data center, and other users' VPCs.[7]

Users can connect to the Internet by adding an Internet Gateway to their VPC, which assigns the VPC a public IPv4 Address.[8]

Users can connect to a data center by setting up a hardware virtual private network connection between the data center and the VPC. This connection allows the user to “interact with Amazon EC2 instances within a VPC as if they were within [the user's] existing network.”[7]

Users are also able to route traffic from one VPC to another VPC using private IP addresses and can communicate as if they were on the same network. Peering can be achieved by connecting a route between two VPCs on the same account or two VPCs on different accounts in the same region. VPC peering is a one-to-one connection, but users can connect to more than one VPC at a time.[9]

To achieve a one-to-many connection between VPCs, you can deploy a transit gateway (TGW).[10][11] In addition, you can connect your VPCs to your on-premise systems by employing the transit gateway.

Security

AWS VPC's security is two-fold: firstly, AWS VPC uses security groups as a firewall to control traffic at the instance level, while it also uses network access control lists as a firewall to control traffic at the subnet level.[12] As another measure of privacy, AWS VPC provides users with the ability to create "dedicated instances" on hardware, physically isolating the dedicated instances from non-dedicated instances and instances owned by other accounts.[13][14]

AWS VPC is free, with users only paying for the consumption of EC2 resources. However, if users choose to access VPC via a Virtual Private Network (VPN), there is a charge.

See also

References

  1. ↑ "Amazon Virtual Private Cloud (VPC)". Amazon Web Services, Inc.
  2. ↑ "Amazon to soothe Enterprise fears with Virtual Private Cloud". arstechnica.com. 27 August 2009.
  3. ↑ "Latest Topics - ZDNet". ZDNet. Archived from the original on 2009-10-05. Retrieved 2009-08-28.
  4. ↑ "Amazon Integrates With Datacenter Using Private Clouds". PCWorld. 26 August 2009.
  5. 1 2 John R. Vacca (2012-11-05), Computer and Information Security Handbook, p. 99, ISBN 9780123946126
  6. ↑ Whittaker, Zack. "Microsoft admits Patriot Act can access EU-based cloud data | ZDNet". ZDNet. Retrieved 2018-07-05.
  7. 1 2 "Amazon VPC FAQs". Amazon Web Services, Inc.
  8. ↑ "Internet Gateways - Amazon Virtual Private Cloud". docs.aws.amazon.com.
  9. ↑ "VPC Peering - Amazon Virtual Private Cloud". docs.aws.amazon.com.
  10. ↑ "AWS Transit Gateway". Amazon Web Services, Inc. Retrieved 2021-04-19.
  11. ↑ "What is a transit gateway? - Amazon Virtual Private Cloud". docs.aws.amazon.com.
  12. ↑ "Amazon Virtual Private Cloud Security" (PDF). uci.edu.
  13. ↑ "Dedicated Instances - Amazon Elastic Compute Cloud". docs.aws.amazon.com.
  14. ↑ "How AWS VPC Traffic Mirroring works | TechTarget". SearchAWS. Retrieved 2023-10-05.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.