Тёмный

Understanding NAT Gateways - AWS Training 

QA North America
Подписаться 37 тыс.
Просмотров 76 тыс.
50% 1

In this video, Stuart Scott, AWS Lead at Cloud Academy, deep dives into NAT Gateways, a key VPC component, showing you what it is and what it is used for from a security standpoint with the help of a drawing pad. Watch the full course cloudacademy.com/course/amazo... to get a full overview of the AWS Virtual Private Cloud and all its associated networking components, NACLs, Security Groups, Bastion Hosts, and Route Tables.
The course continues on the topic of VPC connectivity, covering VPC Peering, AWS Transit Gateways and VPN & Direct Connect.
This course will help you to architect and build your VPC for a variety of different workloads and use cases. The course is designed for those professionals who are looking to learn more about AWS networking features and components and those studying for the AWS solutions architect certifications.
This course learning objectives are:
Confidently architect a VPC across multiple availability zones within a Region
Explain different networking components commonly used within AWS VPCs
Secure your VPCs, helping you to protect your resources within them
Assess which method of connectivity to your VPCs would be best in different scenarios
Enroll on the full course at cloudacademy.com/course/amazo...

Наука

Опубликовано:

 

17 июн 2019

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 87   
@hritujbansod4019
@hritujbansod4019 Месяц назад
you sorted out so many things by relating them. great video
@bharatchandrahanumanthavaj9430
@bharatchandrahanumanthavaj9430 3 года назад
got a clear picture of NAT , feeling refreshed!!! .thank you
@stuartscott6368
@stuartscott6368 2 года назад
Thank you Bharat1287!
@smamind
@smamind 3 года назад
Short videos are always good for refreshing the concept.
@mikeycodes
@mikeycodes 3 месяца назад
Fantastic explanation. This cleared things up for me. Thank you!
@shraddhasable5416
@shraddhasable5416 Год назад
thank you so much for making it so easy, very well explained
@juliansalas8513
@juliansalas8513 2 года назад
Thanks! finally, I got the reason why a NAT needs a public subnet to work. Very clear your explanation!.
@stuartscott6368
@stuartscott6368 2 года назад
Hi Julian, thank you! I'm pleased to hear it cleared up any confusion you had!
@anilkommalapati6248
@anilkommalapati6248 2 года назад
No bullshit. Straight to the point. crystal clear.
@readonlylogin
@readonlylogin 6 месяцев назад
Quite short and clear explanation! Well done!
@lesmonsaluta
@lesmonsaluta 4 месяца назад
Amazing explanation! Thank you so much!
@synchronizingsynchronize3066
@synchronizingsynchronize3066 3 года назад
you are my hero it is so helpful I'm doing project this content is really helpful and RU-vid is really helpful since I found first since 2015
@Brownmumba8973
@Brownmumba8973 2 года назад
Ok… wow. You gave context, a clear explanation and made it very easy to understand through reinforcement. Smashing instructor
@stuartscott6368
@stuartscott6368 2 года назад
Thank you very much Fahad Ali, I appreciate the feedback
@MeidanMeshulam
@MeidanMeshulam Год назад
Great stuff!
@keyntankeye
@keyntankeye 4 года назад
This is very well explained. Thanks a bunch
@stuartscott6368
@stuartscott6368 4 года назад
A pleasure, thank you Keyntankeye
@malang-aks
@malang-aks 2 года назад
why people dislike.. while there is no point of doing this.. excellent video
@diegoandreeporrasrivas1155
@diegoandreeporrasrivas1155 4 года назад
Very clear and well explained!
@stuartscott6368
@stuartscott6368 4 года назад
Thank you Diego!
@samk_jg
@samk_jg Год назад
Awesome tutorial👋
@Hackenbaker
@Hackenbaker 4 года назад
Very well explained!!! Thank you
@stuartscott6368
@stuartscott6368 4 года назад
Thank you Mario
@chris0628
@chris0628 Год назад
Excellent, to-the-point video!
@stuartscott6368
@stuartscott6368 Год назад
Thank you Chris, appreciate the feedback!
@armena2866
@armena2866 4 года назад
Amazing explanation - thanks!
@stuartscott6368
@stuartscott6368 4 года назад
Thank you Armen!
@jota.8868
@jota.8868 3 года назад
Thank you!
@k7babu555999
@k7babu555999 4 года назад
Nice video 👍 thanks for sharing
@prakash2179
@prakash2179 3 года назад
Very useful 👍
@arithex
@arithex 2 года назад
Great walkthrough -- I got my answer before the 3min mark. For some reason I was thinking of the NAT gw's as belonging to the private subnet, not the public. The way my NAT router at home belongs to me, not my cable company. Subscribed!
@stuartscott6368
@stuartscott6368 2 года назад
Happy to hear you got your answer arithex!
@jasper5016
@jasper5016 Год назад
Wow this is the fantastic video. I have watched so many videos but this explanation was very precise and clear.
@stuartscott6368
@stuartscott6368 Год назад
Thank you Jasper5016!
@jasper5016
@jasper5016 Год назад
@@stuartscott6368 - Just to tell you, I cleared my SAA exam and your videos had a great contribution to it.
@stuartscott6368
@stuartscott6368 Год назад
@@jasper5016 Congratulations to you, that's an awesome achievement! Great work, and thank you for letting me know! 👍
@cselphenator
@cselphenator 3 года назад
AWSome job thanks!
@stuartscott6368
@stuartscott6368 3 года назад
Thank you Christopher!
@rkotcher
@rkotcher 3 года назад
Wow you're very good at explaining things. subscribed.
@stuartscott6368
@stuartscott6368 3 года назад
Thank you Robert, appreciate the feedback!
@Mohcine3tt
@Mohcine3tt Год назад
Well explained
@Gionawii
@Gionawii 2 года назад
How is the software download being done to the ec2 instance in private subnet without Nat accepting traffic from the internet?
@avisworld745
@avisworld745 Год назад
What if I want a Internet traffic eg azure power apps traffic to reach Private subnet.. Will nat gw allow the inbound traffic cmng from the Internet gw to the private subnet ?
@sergiodanielsaade4457
@sergiodanielsaade4457 3 года назад
thank you!!! Very clear... one question, can the EIP of the Nat gateway be reached from the internet, for example, can I ping it? or everything is denied from the Internet? Thank you in advance
@EwertonSilveira
@EwertonSilveira Год назад
Tks 🎉
@awaznipi2709
@awaznipi2709 11 месяцев назад
Cloud Made easy! 👍
@carlitos081
@carlitos081 4 месяца назад
perfect
@susanrussel1409
@susanrussel1409 2 года назад
Does Cloud Academy have an AWS Sandbox to go along with their courses. I am currently using A Cloud Guru but your lecture is soooo much easier to understand.
@QANorthAmerica
@QANorthAmerica 2 года назад
Hey Susan, you can find here cloudacademy.com/search/?platform=amazon-web-services&product=lab&q=labs all of our AWS labs where you can practice your skills in a live AWS environment. If you prefer, you can register here info.cloudacademy.com/free-courses-list and start training for free with our selection of free content. Don’t hesitate to reach out if you have any other questions. Thanks, Cloud Academy Team.
@TheTravelingMonkey
@TheTravelingMonkey 4 года назад
Nice tutorial! Quick question though. The NAT Gateway sends a request to an internet resource. Hence it allows response from that resource only?
@stuartscott6368
@stuartscott6368 3 года назад
Correct, the NAT GW will contact the resource requested from the source client, in this example, the private EC2 instance
@nivincp
@nivincp 4 года назад
Nice tutorial! Thank you. What's the drawing pad program you are using?
@stuartscott6368
@stuartscott6368 4 года назад
Thank you Nivin - I was using Sketchbook by Autodesk with a Gaomon digital drawing tablet.
@indian3197
@indian3197 2 года назад
Great video. One question. While receiving the patch or update data from the Internet, will NAT gateway allow the return traffic towards the private subnet instances which originated the traffic to the Internet?
@stuartscott6368
@stuartscott6368 2 года назад
Yes, the NAT Gateway will manage the communication
@alexoteg7536
@alexoteg7536 7 месяцев назад
How many Ec2 can be in one subnet
@scottscott232
@scottscott232 2 года назад
Fantastic explanation. A quick question though: if there is no inbound traffic allowed to the private subnet, then how are the instance OS's patched / updated?
@stuartscott6368
@stuartscott6368 2 года назад
Hi Steve, the request has to be initiated from the instance requiring the update first. As long as the request comes from an internal resource first, in this case, the instance, the NAT will forward the request externally and then receive the reply and allow comms between the outside world and the private instance. The NAT just doesn't accept inbound connections being initiated to internal resources. Thank you for the positive feedback too! Much appreciated!
@scottscott232
@scottscott232 2 года назад
@@stuartscott6368 That makes sense. Many many thanks.
@TheSidhussain
@TheSidhussain 5 лет назад
too good !!!
@QANorthAmerica
@QANorthAmerica 5 лет назад
Glad you like this video TheSidhussain!
@stuartscott6368
@stuartscott6368 4 года назад
Thank you TheSidhussain
@belfunkk
@belfunkk 3 года назад
What rules do you have to add to the security group of the private instances to allow for connectivity via the nat gateway?
@stuartscott6368
@stuartscott6368 3 года назад
Hi belfunkk, this largely depends on what you want the private instances to access. For example, if the private instances are communicating using HTTP, then you would use port 80 as the port on the outbound ruleset, pointing to the Private IP of the NAT G/W as the destination.
@jonathankohn9231
@jonathankohn9231 3 года назад
why does a NAT gateway need an elastic IP?
@viskal-cg1dd
@viskal-cg1dd Год назад
Wow what is the tool u used for drawing crystal clear drawings
@stuartscott6368
@stuartscott6368 Год назад
Thank you, I just used a GAOMON digital drawing board with a drawing app
@luismora1017
@luismora1017 4 года назад
whats the difference between a NAT gateway and a NAT instance? (is it that a NAT gateway is manage by AWS?)
@stuartscott6368
@stuartscott6368 4 года назад
Hi Luis - You can find a summary table comparing the 2 here: docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-comparison.html
@debabhishek
@debabhishek 3 года назад
you are suggesting 1 net gateway per public subnet , per availability zone,, as route tables does not take duplicate entries for same entry . we need separate route table for each private subnet in each availability zone. Correct me I am wrong.
@stuartscott6368
@stuartscott6368 3 года назад
Hi Abhishek, you are correct, so if you have a multi-AZ infrastructure with more than one public subnet, then to maintain high availability you should create a NAT Gateway in each of the public AZs and update the routing accordingly for each of the private subnets.
@fooked1
@fooked1 Год назад
So why are they so expensive?
@vinayreddy4728
@vinayreddy4728 4 года назад
Is there a way to use NAT gateway between 2 different VPC's...
@stuartscott6368
@stuartscott6368 4 года назад
Hi Vinay, a NAT gateway is used to allow instances in a private subnet to initiate a connection to the internet, while preventing connections being made inbound. NAT Gateways are not used to connect or exchange data flow between 2 VPCs. If you want to route connect to VPCs together, consider using VPC Peering or the AWS Transit Gateway. One point to remember is that NAT Gateways are not able to route any traffic through a VPC peering connection, a Site-to-Site VPN connection, or AWS Direct Connect. Even when you have 2 or more VPCs connected via peering or Transit gateway, the NAT gateway can't be used by resources on the other side of these connections by other VPCs.
@vinayreddy4728
@vinayreddy4728 4 года назад
@@stuartscott6368 Thanks a lot ... Explained clearly..
@SYEDFERHANHAIDER
@SYEDFERHANHAIDER 4 года назад
Can't we get this done by a network ACL rule simply(rule that allows all outbound traffic but denies all inbound traffic)? why do we need the NAT gateway?
@luismora1017
@luismora1017 4 года назад
that is if your looking at it from the network layer rules, but the function of the NAT gateway is also to translate the private IP address into Public IP adress (At least thats what the theory says)
@sthoyyeti
@sthoyyeti 4 года назад
1. Security Groups of EC2 instances has to allow outbound traffic 2. ACL also has to allow which ports and CIDR block are allowed to be reached at Subnet level. 3) Now How your private subnet is connected to internet which is addressed by NAT instance or NAT gateway in public subnet, which gives you a public IP. which inturn talks to Internet Gateway.
@rakesh4642
@rakesh4642 4 года назад
NACL is managed by aws and all the traffics are allowed by default,,,,u cant change that
@stuartscott6368
@stuartscott6368 4 года назад
@syed Farhan Haider. If you created a NACL and associated it with the private Subnet that blocked ALL inbound traffic, then no communication could be made to any resource within that Subnet from outside of that subnet. All the traffic will be blocked at the network layer. This would essentially isolate your subnet from every other subnet in your VPC, obviously, this is not ideal. NACLs control network traffic using ports and protocols at the subnet level. Luis is also correct in stating that the NAT will perform translation as well.
@stuartscott6368
@stuartscott6368 4 года назад
@@rakesh4642 Hi Rakesh, that is not strictly true. AWS will create a default NACL for your VPC that does not have any restrictions configured at all and effectively allows ALL traffic. However, you can create your own NACLs that contain far more restrictive controls, and this is recommended. You can then associate different restricted NACLs to different Subnets within your VPC. Only 1 NACL can be associated with 1 subnet, however, you can associate the same NACL to multiple subnets
@antwanwimberly1729
@antwanwimberly1729 7 месяцев назад
USA 🇺🇸
@joanale609
@joanale609 3 года назад
so expensive.... $50 per month
@singhamita
@singhamita 4 года назад
Very well explained Thank you !!
@stuartscott6368
@stuartscott6368 3 года назад
A pleasure, thank you Amita!
@danishuddin9752
@danishuddin9752 2 года назад
Thank you!
Далее
Introduction to AWS Networking
30:02
Просмотров 427 тыс.
Amazon Virtual Private Cloud (VPC) Routing Deep Dive
10:31
Would you help?!😳
00:32
Просмотров 3 млн
NAT Explained - Network Address Translation
4:26
Просмотров 1,7 млн
AWS IAM Core Concepts You NEED to Know
21:40
Просмотров 195 тыс.
AWS VPC Endpoints (What You Need To Know)
15:12
Просмотров 43 тыс.
AWS Essentials: Network Access Control List (NACLs)
13:25
Setup an AWS Site-to-Site Virtual Private Network (VPN)
18:33
AWS Networking Fundamentals
40:09
Просмотров 451 тыс.
A Deep Dive into AWS Transit Gateway
14:02
Просмотров 33 тыс.
Intro to AWS - The Most Important Services To Learn
50:07
AWS Networking Basics For Programmers | Hands On
27:14
Просмотров 105 тыс.
Сложная распаковка iPhone 15
1:01
Просмотров 15 тыс.