We believe in architecting application centric IT infrastructure that is focused on building business efficiency and scalability utilizing hybrid cloud and converged models of IT service delivery.

1. AWS Networking &
Hybrid Cloud Connectivity

2. 1.The concepts and building blocks
2.Connectivity options
3.Routing and AWS. Why and how BGP is
used
4.Redundancy & real life examples
AWS Networking &
Hybrid Cloud Connectivity

3. 1.The concepts and building blocks
2.Connectivity options
3.Routing and AWS. Why and how BGP is
used
4.Redundancy & real life examples
AWS Networking &
Hybrid Cloud Connectivity

4. Public Cloud Solutions
EC2
AZ1
Route53 DNS
Internet
Cloud Front
CDN
EL
B
• Typical Internet facing web app
• Internet – well connected, high
speed
• Low establishment cost
• Network performance non
guaranteed
• Public Internet
• Globally scalable via Cloud Front
Internet Router
performing NAT
192.168.1.0/24
office/home network
RDS
DB
EC2
AZ2
EL
B
RDS
DB
S3 S3

5. Virtual Private Cloud (VPC)
Solutions
VPC CIDR 10.1.0.0/16
Availability Zone A Availability Zone B
Public Subnet Public Subnet
Private Subnet Private Subnet
Instance A
10.1.1.11 /24
Instance B
10.1.2.22 /24
Instance C
10.1.3.33 /24
Instance D
10.1.4.44 /24
10.1.1.0/16
10.1.2.0/16
10.1.3.0/16
Direct
Connect
Hardware
VPN
(IPSec
Internet)
VGW
IGW
Corpora
te Office
Corpora
te Office
• Your own private, isolated
section of the AWS cloud
• Corporate DC extension into
AWS
• Grouping of EC2 instances and
other services within a private
IP address range i.e.
10.1.0.0/16
• Subnets are local per AZ (layer
3 DC­DC design)
• Failover is via SLB or DNS – no
VMotion like failover
• Complete control over
networking & security

6. VPC Components
VPC CIDR 10.1.0.0/16
Availability Zone A Availability Zone B
Public Subnet Public Subnet
Private Subnet Private Subnet
Instance A
10.1.1.11 /24
Instance B
10.1.2.22 /24
Instance C
10.1.3.33 /24
Instance D
10.1.4.44 /24
10.1.1.0/16
10.1.2.0/16
10.1.3.0/16
Direct
Connect
Hardware
VPN
(IPSec
Internet)
VGW
IGW
Corpora
te Office
Corpora
te Office
• IGW ­ Internet Gateway
• VGW ­ Virtual Private
Gateway
• CGW – Customer Gateway
• Subnets
• Route tables
• Direct Connect
• Hardware VPN
• Security Groups & ACLs
CGWCGW

7. 1.The concepts and building blocks
2.Connectivity options
3.Routing and AWS. Why and how BGP is
used
4.Redundancy & real life examples
AWS Networking &
Hybrid Cloud Connectivity

8. Hardware VPN – IPSec via
Internet
• Provides an extension of the onsite corporate
network
• Can use your existing private IP addressing 10.x
etc
• IPSec tunnel to secure traffic over the Internet
(128­bit AES)
• Static or dynamic routing (BGP)
• 2 x termination points per region. Default is a
tunnel to each

9. Hardware VPN – IPSec via
Internet
Console builds
config
CGW’s Cisco, Juniper or
Windows Server
Internet links
xDSL, EoC, Fibre
2 x tunnels to each edge
site (for VPG
redundancy)

10. AWS Direct Connect ­ Features
• High speed, dedicated, private pipe into AWS
(VPC)
• Consistent network performance compared to
Internet
• Metered outbound traffic (~1/3 cost of Internet)
• 1 or more network connection points per region
(Syd x 2)
• Supports redundancy (BGP routing)
• Allows QoS
• End to end support by single network provider

11. AWS Direct Connect ­ Benefits
• Reduced network transfer costs (out of AWS)
• Improved & consistent application performance
• Flexible – initial seed data typically very large
• Less downtime ­ end to end support
• Security and compliance
• Enabler for the Hybrid Cloud Architecture

12. AWS Direct Connect ­ Anatomy
Customer DCColocation Facility - e.g. Equinix SV1
VPC CIDR 10.1.0.0/16
AS7224
Customer Subnet
192.168.0.0/16
AS65442
AWS Direct Connect POP
Co-location rack within
same DC ie Equinix Sydney
Customer or partner
device
CGW
AWS Direct Connect
Point of Presence
Customer Gateway
Cross Connect
Customer Datacenter
Service Provider
(MPLS L3 IP VPN or VPLS)
Private Virtual Interface
dot1q VLAN 666
Instance A
10.1.1.11 /24
Availability Zone A Availability Zone B
Public Subnet Public Subnet
Private Subnet Private Subnet
Instance B
10.1.2.22 /24
Instance C
10.1.3.33 /24
Instance D
10.1.4.44 /24
10.1.1.0/16
10.1.2.0/16
10.1.3.0/16
VGW
BGP over /30 routed subnet
VLAN on dot1q trunk
BGP via managed Service
Provider Network
169.254.247.16/30
.17 .18

13. 1.The concepts and building blocks
2.Connectivity options
3.Routing and AWS. Why and how BGP is
used
4.Redundancy & real life examples
AWS Networking &
Hybrid Cloud Connectivity

14. BGP
• Border Gateway Protocol
• Needed to implement network redundancy
• Standards based protocol used to connect the global
Internet
• Exchanges routes ‘prefixes’ between ‘neighbours’
• Uses AS numbers ie AS 65001
AS_PATH measure of network distance
• Local Preference – means to override AS_PATH locally
• Used by AWS to connect to customers and advertise
routes.
– Direct Connect (mandatory)
– IPSec VPN (optional)
• Bi­Directional Forwarding Detection (BFD) – speeds up
failover to as low a 150ms. Standard BGP can be 180 sec.

15. 1.The concepts and building blocks
2.Connectivity options
3.Routing and AWS. Why and how BGP is
used
4.Redundancy & real life examples
AWS Networking &
Hybrid Cloud Connectivity

16. Questions or follow­up?
79 Madison Ave, New York, NY 10016
www.cloudsyntrix.com
646­873­6945