|
Introducing Amazon Virtual Private Cloud (VPC) |
|
Friday, 28 August 2009
by Michel Roth
|
|
Amazon Virtual Private Cloud (Amazon VPC) lets you create your own logically isolated set of Amazon EC2 instances and connect it to your existing network using an IPsec VPN connection.
Amazon Virtual Private Cloud (Amazon VPC) lets you create your own logically isolated set of Amazon EC2 instances and connect it to your existing network using an IPsec VPN connection. This new offering lets you take advantage of the low cost and flexibility of AWS while leveraging the investment you have already made in your IT infrastructure.
This cool new service is now in a limited beta and you can apply for admission here.
Here’s all you need to do to get started:
- Create a VPC. You define your VPC’s private IP address space, which can range from a /28 (16 IPs) up to a /18 (16,384 IPs). You can use any IPv4 address range, including Private Address Spaces identified in RFC 1918 and any other routable IP address block.
- Partition your VPC’s IP address space into one or more subnets. Multiple subnets in a VPC are arranged in a star topology and enable you to create logically isolated collections of instances. You can create up to 20 Subnets per VPC (you can request more using this form). You can also use this form to request a VPC larger than a /18 or additional EC2 instances for use within your VPC.
- Create a customer gateway to represent the device (typically a router or a software VPN appliance) anchoring the VPN connection from your network.
- Create a VPN gateway to represent the AWS end of the VPN connection.
- Attach the VPN gateway to your VPC.
- Create a VPN connection between the VPN gateway and the customer gateway.
- Launch EC2 instances within your VPC using an enhanced form of the Amazon EC2 RunInstances API call or the ec2-run-instances command to specify the VPC and the desired subnet.
Once you have done this, all Internet-bound traffic generated by your Amazon EC2 instances within your VPC routes across the VPN connection, where it wends its way through your outbound firewall and any other network security devices under your control before exiting from your network.
Source: http://aws.typepad.com/aws/2009/08/introducing-amazon-virtual-private-cloud-vpc.html
|
