Skip to content

Latest commit

 

History

History
56 lines (53 loc) · 2.62 KB

File metadata and controls

56 lines (53 loc) · 2.62 KB

AWS Direct Connect Architecture

  • Return to table of contents

  • Useful Links:

  • Exam Notes:

    • Terabytes of data? Direct Connect.
    • Remember the set up time required - Weeks to months.
    • Connections over a Direct Connect are not encrypted.
    • Private VIFs are a one-to-one connection.
    • There is a charge per hour for the port.
    • Data transfer out is charged.
    • Routes advertised over BGP.
    • Can create multiple Direct Connects to a single DX location.
    • Important options:
      • Speed: 1Gbps or 10Gbps
      • DX location
    • AWS allocates a DX port in the DX location
      • 1000-Base-LX or 10GBASE-LR
    • Request a cross-connect into your network (Your router).
    • Private VIF connects to a Virtual Private Gateway (VGW).
    • Public VIF, public zone services but not internet.
    • From AWS:
      • 1Gbps => 10Gbps
    • From Partner:
      • Ranges of speeds: 50Mbps => 10Gbps
      • Hosted connection - a DX connection with one .
      • Hosted VIF - Single VIF with shared bandwidth*
    • MISC:
      • Direct connect offers no encryption!
        • Any data transiting unless encrypted by an application is not encrypted.
      • Provision DX, provision public VIF and the create a site-to-site VPN across the VPN.
      • No sharing internet data cap.
      • No sharing internet bandwidth.
      • No transit over the internet - low/consistent latency.
      • Cheaper data transfer / faster speeds.
    • Link Aggregation Groups (LAGS):
      • Multiple physical connections act as one - Speed * n
        • Provide less admin overhead, more speed, but not really more resilience.
      • Max of 4 connections per LAG
        • All must be same speed
        • Must terminate at same location.
      • Lag active as long as MinimumLinks attribute is healthy.
    • Transit VIFS:
      • Public VIF can access all AWS public .
        • VLAN and BGP session.
      • Private VIF can only access VPC's in the same AWS region via VGWs.
    • DX Gateway: * Direct Connect Architectures