Lecture 121: Introduction to DX Virtual Interfaces (VIFs)
- 课程：[NEW] AWS Certified Advanced Networking Specialty 2026
- 视频时长：06:22
- 来源：Udemy Lecture 27896480
- Slide 数量：12
- 画面切换：00:19、00:34、00:40、01:18、03:37、03:44、04:08、04:20、04:25、05:18、05:30
扫描说明
逐条检查了 Udemy 页面中的 86 条 Transcript cue，并以每条 cue 对应画面扫描了全长约 6:22 的视频。依据 VIF 定义、802.1Q VLAN、三类 VIF、Public/Private VIF 路径、Dedicated/Hosted 对比和 Transit VIF 架构的每次信息增量，共划分为 12 个小节。正式截图均在锁定 Lecture 27896480、Autoplay 关闭、视频播放且控件隐藏后，按完整媒体边界截取为 1364×770，并逐张复核。
Transcript 来自 Udemy 页面自带的英文自动字幕，没有使用 ASR。下面保留页面原文，包括其中的语法或识别错误。
1. DX Virtual Interfaces 导入
时间范围：00:00–00:19
总结 / Summary
中文
Direct Connect 连接（DX Connection）提供物理连通性（physical connectivity），虚拟接口（Virtual Interface, VIF）则在其上提供逻辑连通性（logical connectivity）。
English
A Direct Connect Connection provides physical connectivity, while Virtual Interfaces provide logical connectivity on top of it.
Transcript
00:00 Hi.
00:01 as of now, we have seen what is DX connections and how to create those connections.
00:06 And now let's focus on the next step. That is DX virtual interfaces.
00:12 While DX connection provides the physical connectivity,
00:16 the virtual interfaces provide the logical connectivity.
2. VIF 提供逻辑连通
时间范围：00:19–00:34
总结 / Summary
中文
端到端流量需要先创建 VIF，再建立边界网关协议（Border Gateway Protocol, BGP）会话，数据包才能通过 DX Connection。
English
End-to-end traffic requires a VIF and an established BGP session before packets can traverse the DX connection.
Transcript
00:19 So in order to really have the traffic flowing end to end,
00:24 you need to create the virtual interfaces
00:27 and you have to make sure that the BGP session is
00:29 established and then actually packet starts flowing through the DX connection.
3. 必须配置 VIF
时间范围：00:34–00:40
总结 / Summary
中文
仅有物理 DX Connection 还不能承载业务流量，必须在连接之上配置一个或多个 VIF。
English
A physical DX connection alone does not carry application traffic; one or more VIFs must be provisioned on it.
Transcript
00:34 So you must first provision the
00:36 virtual interfaces on top of your DX connection.
4. 802.1Q VLAN 标记
时间范围：00:40–01:18
总结 / Summary
中文
每个 VIF 主要由 IEEE 802.1Q 虚拟局域网（Virtual LAN, VLAN）标记来定义，使同一物理连接上的逻辑流量彼此隔离。
English
Each VIF primarily uses an IEEE 802.1Q VLAN tag to isolate logical traffic on the same physical connection.
Transcript
00:40 Now
00:41 when you create the virtual interfaces,
00:44 you have to use 802.1 Q VLAN
00:47 tagging feature and this is what we had covered in the previous lecture.
00:52 And now we will see its applicability in this context.
5. 三类 VIF
时间范围：01:18–03:37
总结 / Summary
中文
Public VIF 访问 AWS 公共 IP；Private VIF 通过虚拟私有网关（Virtual Private Gateway, VGW）或 Direct Connect 网关（DX Gateway）访问 VPC；Transit VIF 经 DX Gateway 连接中转网关（Transit Gateway, TGW）。
English
Public VIF reaches AWS public IPs, Private VIF reaches VPCs through a VGW or DX Gateway, and Transit VIF reaches TGWs through a DX Gateway.
Transcript
01:18 All these services have the public endpoints or public IPs.
01:22 Now, one way to reach to these IPs is over the internet
01:27 and this is how typically we access AWS
01:29 services, but you can access these services over the DirectConnect,
01:35 which is a private network between your data center and AWS.
02:03 Second type of the VIF is a private VIF as the name suggests,
02:07 it allows you to connect to the VPCs
02:10 and then all the resources inside VPC which are typically your EC2 machines or ENIs
02:17 can be accessed over the private IP.
02:20 And with private VIF,
02:21 either you can directly connect it to virtual private Gateway which is attached
02:26 to the VPC or you can attach private VIF to DirectConnect Gateway.
02:31 And then same DX Gateway can be attached to multiple VPCs.
02:35 And we will see all those architecture in the following lectures.
02:39 Third type of the VIF is Transit VIF and
02:42 this allows the connectivity to the Transit Gateway,
02:46 but you can't directly attach a Transit VIF to the Transit Gateway.
02:50 For this, you have to also have the DX Gateway in between.
02:55 And then you can attach Transit VIF to the Transit Gateway.
02:59 And once you attach
03:01 the DX connection to the Transit Gateway,
03:03 it can be then attached to the hundreds and thousands of the VPCs.
6. Public 与 Private VIF 基础架构
时间范围：03:37–03:44
总结 / Summary
中文
基础图展示 AWS 公共端点、多个 VPC、DX 位置、AWS Direct Connect Router 和企业数据中心之间的物理拓扑。
English
The base diagram shows public AWS endpoints, multiple VPCs, the DX location, the AWS Direct Connect router, and the corporate data center.
Transcript
03:37 And once that happens,
03:39 now you create a logical connectivity on top of this connection in the form of VIF.
7. Private VIF 直连 VGW
时间范围：03:44–04:08
总结 / Summary
中文
Private VIF 可直接终止在附加到单个 VPC 的 VGW；分配的 VLAN ID 将该逻辑路径与其他 VIF 隔离。
English
A Private VIF can terminate on a VGW attached to one VPC, with a VLAN ID isolating that logical path.
Transcript
03:44 So you create a private VIF and attach it to
03:47 virtual private Gateway attached to the VPC.
03:50 And while creating the VIF, you assign the
03:53 VLAN tag and these VLAN tags help segregate the
03:56 traffic across multiple VIFs on the same connections.
03:59 And we already talked about how this VLAN tagging works.
04:03 So likewise,
04:04 you can create another private VIF which goes to DX Gateway and
8. Private VIF 连接 DX Gateway
时间范围：04:08–04:20
总结 / Summary
中文
另一个 Private VIF 可连接 DX Gateway，再由同一个 DX Gateway 关联多个 VPC，从而扩展私有网络覆盖范围。
English
Another Private VIF can attach to a DX Gateway, which can associate with multiple VPCs to expand private reachability.
Transcript
04:08 then one DX Gateway can be attached to the multiple VPCs
04:12 and for connecting to the public services, you create a public VIF.
04:16 Now, in all these cases, there are different via
04:19 tagging
9. Public VIF 访问公共服务
时间范围：04:20–04:25
总结 / Summary
中文
Public VIF 使用独立 VLAN 访问 AWS 公共服务端点；同一 DX Connection 可同时承载 Public 和多个 Private VIF。
English
A Public VIF uses a separate VLAN to reach public AWS service endpoints, alongside multiple Private VIFs on the same DX connection.
Transcript
04:20 that we are using so that traffic can be isolated.
10. Dedicated Connection 上的多个 VIF
时间范围：04:25–05:18
总结 / Summary
中文
专用连接（Dedicated Connection）可以承载多个 VIF，每个 VIF 使用不同 VLAN；课程提到当时默认上限为 50，但实际考试或部署应核对最新 AWS 配额（service quota）。
English
A Dedicated Connection can carry multiple VIFs with different VLANs; the lecture cites a limit of 50, but current AWS service quotas should be verified.
Transcript
04:25 OK. Now let's look at the VIF with respect to the Dedicated or a Hosted connection.
04:30 So if you are using the Dedicated connection,
04:33 then you can have multiple VIFs created on top of the same connection.
04:38 And as of today, the limit is 50 VIFs, but in the future, it may increase.
04:44 So always refer AWS documentation for the current limits.
04:48 But in case of Hosted connection,
04:50 which means the connection is owned by the DX partner
04:54 and then it is allowing you to
04:57 use that connection.
04:59 So in that case, you can create only one VIF on that Hosted connection,
05:04 which means if you want to have multiple VIFs created,
05:07 then you need to have the multiple Hosted connections.
05:10 Now, in this case, the VLAN tag number is allocated by your DX partner
05:17 and you can't edit that.
11. Hosted Connection 每连接一个 VIF
时间范围：05:18–05:30
总结 / Summary
中文
托管连接（Hosted Connection）由 DX Partner 拥有，每条 Hosted Connection 只能创建一个 VIF；若需要多个 VIF，就要订购多条 Hosted Connections，而且 VLAN ID 由 Partner 预分配且不可编辑。
English
A Hosted Connection is partner-owned and supports one VIF per connection; multiple VIFs require multiple Hosted Connections, with VLAN IDs preassigned by the partner.
Transcript
05:18 So whenever you will create a VIF, there will always be this VLAN
05:22 tag, prepopulated
05:24 and grayed out for you.
05:25 So this is how the Hosted VIF looks on top of the Hosted connection.
12. Transit VIF 扩展架构
时间范围：05:30–06:22
总结 / Summary
中文
Transit VIF 必须先连接全局 Direct Connect Gateway，再关联一个或多个不同区域（Regions）的 TGW；各 TGW 可连接大量 VPC，适合规模化网络架构。
English
A Transit VIF first attaches to a global Direct Connect Gateway, which can associate with TGWs across Regions; those TGWs can connect many VPCs for scaled architectures.
Transcript
05:30 Now, let's look at the third VIF that is a Transit VIF
05:34 as we said, it allows you to connect to the Transit gateways.
05:38 But for that you have to create a VIF and attach it to the direct
05:41 connect Gateway first and then you can attach
05:44 multiple Transit gateways to this DirectConnect Gateway.
05:48 Now, DirectConnect gateways are the Global routers.
05:52 That means you can connect the Transit gateways across different AWS regions.
05:58 And then you can create VPCs
06:01 inside those regions and connect to the Transit Gateway in that Region.
06:05 So again,
06:06 Transit VIF is very important when you have to
06:09 have a scale out architecture over a DX connection.
06:12 And in the following lectures,
06:14 we will see some architectures which covers this in more detail.
06:18 So thanks for watching and stay tuned.
整讲总结 / Overall Summary
中文
DX Connection 提供物理链路，VIF 通过 802.1Q VLAN 和 BGP 提供逻辑网络。Public VIF 访问公共 AWS 端点，Private VIF 通过 VGW 或 DX Gateway 访问 VPC，Transit VIF 经 DX Gateway 连接 TGW。Dedicated Connection 支持多个 VIF，而 Hosted Connection 每条连接只支持一个由 Partner 分配 VLAN 的 VIF。
English
A DX Connection supplies the physical link, while VIFs provide logical networking with 802.1Q VLANs and BGP. Public VIF reaches public AWS endpoints, Private VIF reaches VPCs through a VGW or DX Gateway, and Transit VIF reaches TGWs through a DX Gateway. Dedicated Connections support multiple VIFs, whereas each Hosted Connection supports one partner-assigned VIF.
返回顶部 ↑