AWS Networking A to Z
VPC
VPC Public Networking
IGW
VPC Hybrid Networking (Virtual) — Deep Dive
VPN Fundamentals:
IKE: internet key exchange: is a protocol how keys are exchange within a vpn
Virtual Private Gateway Deep Dive (VGW)
S2S VPN Connection
partially HA design. AWS side is fully HA. but the customer side is not HA. 2 endpoints for vgw for HA(2 different az’s)
Fully HA S2S. 2 or more physical endpoints can manage vgw.
dynamic vpn are use bgp protocol(border gateway protocol). customer router does not support bgp, you cant use dynamic routing.
BGP
AWS direct connect and dynamic vpns both are utilized BGP.
BGP is a foundation is designed to exchange network topology, and it does this by exchanging paths between autonomous systems. BGP is always shorter path as the preferred one.