<Technical Track> Mark Ryland, Director, Public Sector Solutions Architect, Amazon Web Services Networking is changing quickly in the cloud era, allowing for improved latency, packet loss and overall quality while strengthening operational control. From commodity hardware to virtual and software-defined networks to IPv6 and HTTP/2, things are changing fast, with no sign of slowing. In this talk we will discuss some of these developments and preview what’s next in the world of AWS and cloud-scale networking.

1. © 2017, Amazon Web Services, Inc. or its Affiliates, All rights reserved.
Networking: Recent Developments
and the Road Ahead
Mark Ryland
Chief Architect, WWPS
markry@amazon.com

2. Outline
Networking at cloud scale
Protocol trends: IPv6 and HTTP/2
Edge to center: CloudFront and VPC
Load balancing: ALB and NLB
Future directions

3. Public peering (only)
ASN 16509
Mar 2015 Feb 2016 Jun 2017
PoPs 69 77 95
Terabits/s 1.85 3.65 7.03

4. Network hardware/software innovation
Getting rid of “the last mainframe”
• “De-verticalizing” the networking stack
• Lower cost
• Better reliability
SDN (VPC) hardware off-load
See James Hamilton video,
Re:Invent 2016

5. Private
backhaul
Protocol updates
Rich IPv6 support
• Edge services, S3
• EC2 dual-stack internal and
external
• Innovation: NAT/PAT-like
Egress-only Gateway (EGW)
for IPv6
HTTP/2 support
• Many optimizations of the
protocol
• Get it for free on CloudFront
and Application Load
Balancer (ALB)
EC2 network
VPC 1
VPC 2
VPC 3
VPC N
Customer private
network
DirectConnect
AWS public address space
S3
DynamoDB
EC2 API
Etc…
Internet
IGW
AWS public address space
CloudFrontWAFRoute53
EGW

6. CloudFront enhancements
Lambda@Edge – run your own code!
• Four events: viewer/origin; request/response
Configurable security policies
Customizable read time-outs and keepalives
Lots of new WAF features; new PoPs!
ACM integration (old but good news)

7. VPC enhancements
VPC dynamic expansion
• Up to four additional /16 CIDRs
Create/recreate default VPC
25Gbps networking for high-end instances
VPC Endpoints for DynamoDB
EIP recovery (best efforts)
CloudWatch metrics for NAT Gateway

8. Load balancing enhancements
Network Load Balancer for VPC
• Single “ENI” inside, single EIP outside per AZ
• Direct TCP connections; source address preserved
• Instantaneous scale
• Cf. NAT Gateway
Application Load Balancer
• Integration with AWS WAF
• More flexible routing and security policies
Target groups, including IP targets

9. What customers want
Wider support for VPC Endpoints (S3, DynamoDB today)
More bandwidth, lower latency (HPC-type workloads)
More customizable routing (L4) and L3 features
• Port mirroring, multi-cast, GARP, etc.
More packet intercept/shaping/re-writing features
More flexibility in DirectConnect
Faster, more configurable VPNs

10. © 2017, Amazon Web Services, Inc. or its Affiliates, All rights reserved.
Thank you!