ANS-C01 Introduction
VPC Fundamentals
VPC Security and Control
VPC Connectivity
VPC Subnets
VPC Routing
VPC Sharing using the AWS Resource Access Manager
Feature Spotlight:
AWS Networking Basics
Introduction to AWS PrivateLink
Using AWS Network Firewalls to Secure Your VPCs
Inter-Regional and Intra-Regional Communication Patterns
The course is part of this learning path
In this section of the AWS Certified Advanced Networking - Specialty learning path, we introduce you to the various networking and VPC services currently available in AWS that are relevant to the ANS-C01 exam.
Learning Objectives
- Identify and describe the various networking services available in AWS
- Describe how to configure an Amazon Virtual Private Cloud (VPC)
- Understand how to control network traffic via Security Groups and Network Access Control Lists (NACLs)
- Describe options for VPC connectivity, subnets, and routing
- Understand how to share VPC resources using the AWS Resource Access Manager (RAM)
- Identify how to evaluate the configuration of VPC resources using the VPC Reachability Analyzer
Prerequisites
The AWS Certified Advanced Networking - Specialty certification has been designed for anyone with experience designing, implementing, and operating complex AWS and hybrid networking architectures. Ideally, you’ll also have some exposure to the nuances of AWS networking, particularly regarding the integration of AWS services and AWS security best practices. Many exam questions will require advanced level knowledge of many AWS services, including AWS networking services. The AWS Cloud concepts introduced in this course will be explained and reinforced from the ground up.
Hello and welcome to this lecture which will take a look at how to enable enhanced networking features on your EC2 instances with the Elastic Network Adapter (ENA), which is a custom interface used to optimize network performance.
If you are looking to enable enhanced networking features to reach speeds of up to 100 Gbps for your Linux compute instances, then you can do so using an ENA. However, ENAs are only supported on a limited number of instances as shown below, and by instances running kernel versions 2.6.32 and 3.2 and above.
For an up to date list of supported EC2 compute types please visit the following link to AWS documentation.
In addition to 100 Gbps speeds, enhanced networking offers higher bandwidth with increased packet per second (PPS) performance, and a big bonus of enhanced networking is that it is offered at no extra cost. In fact, when launching an instance using Amazon Linux 2 or with the latest version of the Amazon Linux AMI, then the instance will have enhanced networking enabled by default, providing its provisioned with one of the supported instance types mentioned earlier.
Enhanced networking is enabled when the ena module is installed on your instance and that the enaSupport attribute is set. If you wanted to confirm that the ena module is installed on your instance then you can run modinfo ena from the terminal prompt. To check that the enaSupport attribute is also set you can use the AWS CLI and run the following command, replacing the red text ("instance_id") with the appropriate instance_id:
aws ec2 describe-instances --instance-ids instance_id --query "Reservations[].Instances[].EnaSupport"
Stuart has been working within the IT industry for two decades covering a huge range of topic areas and technologies, from data center and network infrastructure design, to cloud architecture and implementation.
To date, Stuart has created 150+ courses relating to Cloud reaching over 180,000 students, mostly within the AWS category and with a heavy focus on security and compliance.
Stuart is a member of the AWS Community Builders Program for his contributions towards AWS.
He is AWS certified and accredited in addition to being a published author covering topics across the AWS landscape.
In January 2016 Stuart was awarded ‘Expert of the Year Award 2015’ from Experts Exchange for his knowledge share within cloud services to the community.
Stuart enjoys writing about cloud technologies and you will find many of his articles within our blog pages.