Lecture 69: VPC Endpoint architectures - Accessing on-premises services
- 课程：[NEW] AWS Certified Advanced Networking Specialty 2026
- 视频时长：02:18
- 来源：Udemy Lecture 50324641
- Slide 数量：2
- 画面切换：00:56
扫描说明
逐条检查了 Udemy 页面中的 34 条 Transcript cue，并对全长约 02:18 的视频画面进行扫描。依据架构导论与 On-premises Endpoint Service 架构的画面切换，共划分出 2 个小节。
Transcript 来自 Udemy 页面自带的英文自动字幕，没有使用 ASR。下面保留页面原文，包括其中的语法或识别错误。
1. PrivateLink 高级架构导论
时间范围：00:00–00:56
总结 / Summary
中文
VPC Endpoint 与私有链路（PrivateLink）可以替代部分复杂的 VPC 对等连接（VPC Peering）或中转网关（Transit Gateway）拓扑，从而简化网络并降低成本。本讲开始介绍面向实际运维的高级架构模式。
English
VPC endpoints and PrivateLink can replace portions of complex VPC Peering or Transit Gateway topologies, simplifying networks and reducing cost. This lecture begins a series of advanced patterns aimed at real-world operations.
Transcript
00:00 Okay, now that you understood how VPC endpoints work and Privatelink works, let's look at some of
00:06 the interesting architectures that emerge using the VPC endpoint and Privatelink.
00:12 So ultimately it simplifies your overall network.
00:15 And you may look at these architectures.
00:18 If you are using, say, too much of VPC peering connections or too much of transit gateways.
00:23 So it would really help you simplify your network and also save your cost.
00:29 And just a word of caution.
00:31 Maybe some of the architectures are little advanced, so don't worry about that.
00:36 You might not have the same architecture scenarios in your exam, but I'm sure this will help you in
00:41 your day to day operations if you are working in AWS networking, right?
00:46 So let's look at some of the architectures.
00:48 And very first architecture is what if you have your services deployed in your on premises data center.
2. 通过 Endpoint Service 暴露 On-premises 服务
时间范围：00:56–02:18
总结 / Summary
中文
提供方 VPC 中部署网络负载均衡器（Network Load Balancer, NLB），并把通过虚拟专用网络（VPN）或专线（AWS Direct Connect）可达的本地应用服务器 IP 注册为 NLB 目标。NLB 再发布为 VPC Endpoint Service，使用者 VPC 创建接口端点（Interface Endpoint），即可通过 PrivateLink 私有访问本地数据中心（on-premises data center）的服务。
English
A Network Load Balancer (NLB) in the provider VPC registers on-premises application-server IPs reachable through VPN or AWS Direct Connect. The NLB is published as a VPC Endpoint Service, and a consumer VPC creates an Interface Endpoint to access the on-premises service privately through PrivateLink.
Transcript
00:56 So you are operating in a hybrid mode.
00:58 In that case as well, you can expose your on premise services using the VPC endpoint service.
01:05 So in AWS you can see that you have consumer VPC and the provider VPC.
01:10 And for creating the VPC endpoint service, you need a network load balancer.
01:15 But the catch here is that the target of this network load balancer can be in your on premises network.
01:21 Right.
01:22 Something like this.
01:23 And of course in order to connect to this on premises server or services you need to have some private
01:30 connectivity.
01:31 So that will be through either VPN or Direct Connect.
01:35 So after having this private connection, you can add this application server using IP as a target to
01:41 this network load balancer.
01:42 And then you can create VPC endpoint service using this network load balancer.
01:48 And then in the consumer VPC you can create the VPC interface endpoint for this VPC endpoint service.
01:55 And then client in the consumer VPC can access the services which are deployed in your on premises network.
02:01 Something like this.
02:02 Right.
02:03 So that's one interesting pattern when it comes to hosting your actual services in your on premises
02:09 network.
02:10 So I hope it is clear.
02:12 And with that, now let's look at some of the additional architectures in the following lectures.
02:16 Thank you.
整讲总结 / Overall Summary
中文
该架构用 NLB、Endpoint Service 与 Interface Endpoint 把 On-premises 服务转换为可被使用者 VPC 私有访问的 PrivateLink 服务。关键条件是 Provider VPC 与本地网络之间已有 VPN 或 AWS Direct Connect 私有连接，并以本地服务器 IP 作为 NLB Target。
English
This architecture turns an on-premises application into a PrivateLink service using an NLB, Endpoint Service, and Interface Endpoint. The provider VPC must already have private connectivity to the on-premises network through VPN or AWS Direct Connect, and the on-premises server IPs are registered as NLB targets.
返回顶部 ↑