网络课程笔记

00:00 Hi, welcome to this section that is VPC

00:02 traffic monitoring, troubleshooting and analysis.

00:06 And in your exam,

00:07 you may expect some questions around this because network

00:10 troubleshooting and monitoring is also an important topic.

00:15 So as of today, there are lot of tools in

00:18 AWS which can help you to monitor your

00:20 traffic and also troubleshoot the networking issues.

00:23 So let's talk about some of the services which are important to cover here.

00:29 So in this section, we will cover VPC

00:31 traffic monitoring. So for that

00:34 the basic tool that

00:35 AWS provide is VPC

00:37 flow

00:37 logs.

00:38 That means you can capture all the network traffic packets

00:41 which are hitting to your VPCs or Subnet

00:44 or at the

00:45 ENI level.

00:46 So we will see how to use VPC flow logs and how to analyze those logs.

00:51 And then I have also provided list of some other

00:54 third party tools which you can use for traffic monitoring.

00:59 Then second is VPC

01:00 traffic Mirroring.

01:01 Now this is for live inspection of the traffic as it enters or leaves the VPC.

01:08 So what basically you can do is

01:10 as the traffic is flowing in and out of your elastic network interfaces,

01:16 you can mirror the traffic.

01:17 That means you can duplicate this traffic and

01:19 send the same packets to some destination.

01:22 And then there you could have some security appliances

01:25 which can monitor this traffic in real time.

01:28 So again,

01:29 we will see how to set up this traffic Mirroring

01:32 and what kind of source and destination you can use.

01:36 And then further, there are two additional services which

01:39 AWS launched

01:41 in around 2022

01:42 which are around network traffic analysis.

01:45 Now, here you don't actually send the traffic to analyze your network. But rather

01:50 you look at the your network configuration

01:53 and based on the configuration,

01:55 you can find out whether you will be able

01:58 to reach from your source to the destination.

02:01 And that's where the VPC reachability analyzer can

02:04 help you detect such issues in your network.

02:07 And then there is a network access analyzer.

02:09 This is more for the security compliance.

02:13 For example,

02:14 network access analyzer can tell you that these are the

02:18 AWS resources in your VPC which can still be accessed over the internet.

02:23 And if you don't want that,

02:25 then you would have to go and modify the corresponding routes

02:28 and make sure that these are private resources.

02:31 So this kind of,

02:32 you know, compliance check can be done using the network access analyzer.

02:37 And in this section, I'm going to cover both these services in the detail.

02:42 And I'm also going to walk you through some use cases around how to implement these.

02:47 And going forward. If

02:49 AWS launches more services in this space, then I will add it in the same section.

02:54 So with that, let's get into this section. Thank you.