Networking & Content Delivery
Deploying multi-region applications in AWS using AWS Global Accelerator
In this post, we’ll discuss how you can improve customer performance and increase resiliency for your multi-region applications with AWS Global Accelerator. We will also provide a walkthrough that helps you set up Global Accelerator to handle traffic management and traffic routing for multi-region application endpoints in both Active-Active as well as Active-Standby deployments. Global […]
Amazon EC2 instance-level network performance metrics uncover new insights
Introduction Amazon EC2 provides instance-level metrics that measure CPU, disk, and network performance. These metrics include bytes and packets in/out and collected by default and can be viewed in Amazon CloudWatch. Amazon EC2 has recently announced additional high-resolution instance level network performance metrics for Elastic Network Adapter (ENA). With these new metrics you can gain […]
400 Amazon CloudFront Points of Presence
Less than three years ago, we announced the 200th Point of Presence for Amazon CloudFront. Since then, we’ve continued to launch more Points of Presence to support more customers and provide them with enhanced content delivery performance. Today, CloudFront has over 400 Points of Presence in 90 cities and across 47 different countries. The expansion of our network […]
How to integrate Linux instances with AWS Gateway Load Balancer
When I meet with customers and discuss AWS Gateway Load Balancer (GWLB), I often get asked for suggestions regarding integrating it with their existing Linux appliances. GWLB utilizes GENEVE encapsulation with some important custom metadata, which doesn’t natively work with either Linux or Linux’s GENEVE module (which is designed only for Ethernet (Layer 2) packets, […]
Introducing AWS Site-to-Site VPN Private IP VPNs
Update 10/13/22: Added walkthrough with the AWS Management console and link to code in CDK and Terraform. One of the most common ways that customers connect securely to AWS from on premises is by using the AWS Site-to-Site VPN managed IPSec VPN solution. One key benefit our customers look for when using the service is […]
Securely Connect your Mobile Device to your AWS environment with AWS Client VPN
AWS Client VPN is a fully-managed, client-based Virtual Private Network (VPN) service used by your remote workforce to securely access resources within AWS and your on-premises network. It’s an elastic service that automatically scales up or down based on demand. In addition to the free, AWS-provided VPN client, you can also use a common Open […]
Connecting Networks with Overlapping IP Ranges
A common situation we see in customer networks is when there are resources with overlapping IP address ranges that must communicate with each other. Frequently this occurs when companies are acquired and have used the same private (RFC1918) address ranges. However, it can also occur when a service provider with a unique IP range must […]
Dual-stack IPv6 architectures for AWS and hybrid networks – Part 2
In part one of our series on IPv6 for AWS and hybrid network architectures, we explored some of the most common dual stack designs: dual stack Amazon Virtual Private Cloud (Amazon VPC) and Amazon Elastic Compute Cloud (Amazon EC2) instances, Internet connectivity, Internet-facing Network Load Balancer and Application Load Balancer deployments, as well as VPC […]
Introducing IPv6-only subnets and EC2 instances
In June 2021, we announced our continued commitment and innovation towards the enablement of IPv6 on AWS. Today, we take a monumental step forward with the ability to create an IPv6-only architecture on AWS. With this launch, Amazon Virtual Private Cloud (VPC) now allows you to create IPv6-only subnets in your dual-stack VPCs and launch […]
Expedite your IPv6 adoption with PrivateLink services and endpoints
AWS now supports IPv6 for AWS PrivateLink services and endpoints. PrivateLink support for IPv6 expedites IPv6 adoption by decoupling the service consumer and service provider IP protocol version. Even if a service provider has not started to support IPv6 for all their back-end services, service consumers can use IPv6 within their VPCs to access the […]