AWS · Advanced Networking Specialty

网络课程笔记

Lecture 129 · 39 张幻灯片

幻灯片、双语总结及 Transcript · 图片已内嵌,可离线阅读。

原文默认收起
lecture-129.md

Lecture 129: Direct Connect SiteLink

  • 课程:[NEW] AWS Certified Advanced Networking Specialty 2026
  • 视频时长:11:33
  • 来源:Udemy Lecture 37218058
  • Slide 数量:39
  • 画面切换:00:22、00:27、00:33、00:41、00:53、01:30、01:51、01:57、02:21、02:28、02:58、03:18、03:24、03:32、03:42、03:56、04:22、04:40、04:50、04:53、04:56、05:09、05:29、06:05、06:27、06:43、06:52、07:12、07:45、08:07、08:19、08:32、08:45、09:28、09:35、09:52、10:11、10:24

扫描说明

逐条检查了 Udemy 页面中的 161 条 Transcript cue,并以每条 cue 对应画面扫描了全长约 11:33 的视频。依据 SiteLink 概念图、无 SiteLink/有 SiteLink 对比、功能要点渐显、全网状与隔离连接模式以及成本总结,共划分为 39 个小节。正式截图均在锁定 Lecture 37218058、Autoplay 关闭、关闭 Transcript 与课程侧栏、视频播放且播放器控件隐藏后,按完整媒体边界截取并输出为 1364×770;逐张复核了右侧、底部和左侧边界。

Transcript 来自 Udemy 页面自带的英文自动字幕,没有使用 ASR。下面保留页面原文,包括其中的语法或识别错误。

1. AWS Direct Connect SiteLink

时间范围:00:00–00:22

AWS Direct Connect SiteLink title slide

总结 / Summary

中文

AWS Direct Connect SiteLink 是在 2021 年 re:Invent 发布的 Direct Connect 功能,用于解决客户站点之间的高容量、低延迟连接问题。

English

AWS Direct Connect SiteLink, introduced at re:Invent 2021, addresses high-capacity, low-latency connectivity between customer sites.

Transcript

00:00 Hello and welcome to this lecture.

00:02 Direct Connect Sitelink.

00:03 Now this is a new feature of Direct Connect, which was launched during the Reinvent 2021, and this

00:10 is now slowly being adopted by the lot of customers of AWS.

00:14 And now in this lecture, let's understand what is sitelink and what problems it solves.

00:20 So first of all, what is Sitelink?

2. SiteLink 的定义

时间范围:00:22–00:27

Definition of AWS Direct Connect SiteLink

总结 / Summary

中文

SiteLink 通过 AWS 全球骨干网络(AWS Global Network Backbone)连接本地网络(on-premises network),无需把流量送入 AWS 区域(AWS Region)。

English

SiteLink connects on-premises networks through the AWS Global Network Backbone without sending traffic into an AWS Region.

Transcript

00:22 So Sitelink connects on premise networks through AWS, Global Network Backbone.

3. 两个客户数据中心

时间范围:00:27–00:33

Two customer data centers in Boston and Mumbai

总结 / Summary

中文

示例从波士顿和孟买两个客户数据中心(customer data center)开始,目标是为它们建立可靠的站点间连接。

English

The example begins with customer data centers in Boston and Mumbai that need reliable site-to-site connectivity.

Transcript

00:27 Now, essentially what it means that if you have, say, for example, your own customer data centers

4. 不依赖 AWS 区域的场景

时间范围:00:33–00:41

Customer sites shown without AWS services

总结 / Summary

中文

客户即使不使用任何 AWS 服务,也可能希望利用 AWS 全球网络(AWS Global Network)连接自己的数据中心。

English

Customers may want to use AWS global networking to connect their data centers even when they consume no AWS services.

Transcript

00:33 and there is no AWS.

00:35 As of now in the picture, and if you need to have the high capacity bandwidth or a connectivity between

5. 传统网络服务商连接

时间范围:00:41–00:53

Traditional provider link between customer data centers

总结 / Summary

中文

传统方案通常向网络服务商(Network Service Provider)采购点到点链路(point-to-point link),以获得两个数据中心之间的专用带宽。

English

The traditional approach purchases a point-to-point link from a network service provider.

Transcript

00:41 these two data centers of your own, typically you will go with some network service provider and set

00:47 up that link.

00:48 While this works, there are many problems with this kind of setup.

6. 互联网与长期合同的局限

时间范围:00:53–01:30

Public Internet or fixed provider network limitations

总结 / Summary

中文

公共互联网(Public Internet)无法保证一致带宽;专用服务商链路又常伴随长期合同、地域锁定和扩展困难,因此连接方式缺乏灵活性。

English

The public Internet cannot guarantee consistent bandwidth, while provider circuits often impose long contracts, geographic lock-in, and limited scalability.

Transcript

00:53 For example, if it's a small company, then they might just go over the Internet for this connectivity

00:58 and you know that Internet cannot provide you the consistent bandwidth.

01:02 Right?

01:03 Or maybe if you need a higher bandwidth, then you might get into the long term contracts with the network

01:09 service provider.

01:10 And then you are locked in for many years and many a times these are like point to point connections

01:15 and you don't get much of the flexibility when you are to expand your network to other geographies.

01:20 So looking at all this problem, this is very inflexible kind of connections.

01:25 Now with AWS and AWS direct connect this, things change.

7. 利用全球 Direct Connect 位置

时间范围:01:30–01:51

AWS Regions and Direct Connect locations around customer sites

总结 / Summary

中文

AWS 在全球提供大量 Direct Connect 位置(Direct Connect Location);客户可把各数据中心连接到最近的位置,再通过 AWS 网络交换流量。

English

Customers can connect each data center to a nearby Direct Connect location and exchange traffic over the AWS network.

Transcript

01:30 So as you know, there are AWS regions and there are direct connect location across 100 plus location,

01:37 right?

01:37 Now, with Sitelink, what you can do is you can rather connect your data centers to nearest direct

01:44 connect location, and then you can use this direct connect locations to route your traffic from one

8. 连接最近的 DX 位置

时间范围:01:51–01:57

Direct Connect locations linked to Boston and Mumbai sites

总结 / Summary

中文

每个客户站点(customer site)连接最近的 Direct Connect 位置(Direct Connect Location),从而避免建设跨洲专线。

English

Each customer site connects to its nearest Direct Connect location, avoiding a customer-built intercontinental circuit.

Transcript

01:51 side to another.

01:52 So as of today, there are 115 location, so you can choose the nearest of yours.

9. 波士顿与孟买接入示例

时间范围:01:57–02:21

Boston and Mumbai customer sites connected to local Direct Connect locations

总结 / Summary

中文

波士顿与孟买站点分别接入当地 Direct Connect 位置(Direct Connect Location),并使用虚拟接口(Virtual Interface, VIF)承载连接。

English

The Boston and Mumbai sites attach to local Direct Connect locations and use VIFs for connectivity.

Transcript

01:57 For example, if you are in the US, then you might want to select a Boston one.

02:01 If you are in Mumbai, you want to select a direct connect location in Mumbai.

02:07 And as you know, all these direct connect locations are already connected over AWS Backbone Network.

02:13 What you just need to do is enable that routing of the network and Sitelink exactly does that thing.

10. SiteLink 启用 AWS 骨干路由

时间范围:02:21–02:28

AWS backbone path enabled between Direct Connect locations

总结 / Summary

中文

在相关虚拟接口(Virtual Interface, VIF)上启用 SiteLink 后,Direct Connect 位置之间的流量可通过 AWS 骨干网络(AWS Backbone Network)转发。

English

Enabling SiteLink on the relevant VIFs allows traffic between Direct Connect locations to traverse the AWS Backbone Network.

Transcript

02:21 Once you enable the AWS Sitelink on your direct connect connections, then it completely bypasses AWS

11. 绕过 AWS Region 并走最短路径

时间范围:02:28–02:58

SiteLink path bypassing AWS Region

总结 / Summary

中文

SiteLink 绕过 AWS 区域(AWS Region),直接在 Direct Connect 位置之间选择最短的 AWS 全球骨干路径(AWS Global Backbone Path)。

English

SiteLink bypasses AWS Regions and takes the shortest AWS backbone path between Direct Connect locations.

Transcript

02:28 region and directly from your direct connect locations.

02:31 Traffic is routed over the shortest path.

02:34 Now this is a very good option now for customers to really use AWS Backbone Network for connecting their

02:43 sites.

02:43 Even they are not using any AWS services.

02:46 So that's what a direct connect sitelink is.

02:49 I hope that's clear and we'll see some of the examples as well.

02:53 How it changes those architectures which we saw earlier.

12. 没有 SiteLink 的基础拓扑

时间范围:02:58–03:18

Without SiteLink routing between customer sites topology

总结 / Summary

中文

没有 SiteLink 时,多个客户站点可通过 Direct Connect 网关(Direct Connect Gateway, DXGW)访问不同区域的虚拟私有云(Virtual Private Cloud, VPC),但站点间路由另有限制。

English

Without SiteLink, customer sites can reach VPCs across Regions through a DXGW, but site-to-site routing is constrained.

Transcript

02:58 Okay, so without sitelink you might have seen this architecture.

03:01 Maybe colors are a little different, but then you have multiple data centers and there is a direct

03:05 connect gateway you connect to, and then you can connect, direct, connect, gateway to different

03:10 vpcs across regions, right?

03:12 And if you remember, there was one problem that direct Connect Gateway cannot allow the routing of

13. DXGW 不支持传递式路由

时间范围:03:18–03:24

No site-to-site routing through one Direct Connect Gateway

总结 / Summary

中文

Direct Connect 网关(Direct Connect Gateway, DXGW)不支持传递式路由(transitive routing),因此两个客户站点不能借同一个 DXGW 相互通信。

English

A DXGW does not support transitive routing, so two customer sites cannot communicate through one shared DXGW.

Transcript

03:18 the traffic from one side to another because it doesn't support the transitive routing.

03:22 So that was a problem.

14. 传统解决方案需要多个网关

时间范围:03:24–03:32

Multiple DXGWs and Transit Gateways introduced as legacy solution

总结 / Summary

中文

传统解决方案需要两个 Direct Connect 网关(Direct Connect Gateway, DXGW)、区域传输网关(Transit Gateway, TGW)和 TGW 对等连接(TGW Peering)。

English

The legacy solution requires two DXGWs, Regional TGWs, and TGW Peering.

Transcript

03:24 And if you remember, the solution was you need to use now two direct connect gateways and also you

03:29 need to use transit gateways along with that.

15. 多个 DXGW + TGW 拓扑

时间范围:03:32–03:42

Two Direct Connect Gateways with Transit Gateway peering

总结 / Summary

中文

每个站点通过独立 Direct Connect 网关(Direct Connect Gateway, DXGW)进入对应传输网关(Transit Gateway, TGW),再由 TGW 对等连接(TGW Peering)承载站点间流量。

English

Each site uses a separate DXGW and TGW, with TGW Peering carrying inter-site traffic.

Transcript

03:32 So we saw this architecture where you could have two direct connect gateways attached to the transit

03:36 gateways, and then you can have the transit gateway peering, and now this traffic can go from one

16. 传统方案实现完整连接

时间范围:03:42–03:56

Full VPC on-premises and site-to-site routing through TGW peering

总结 / Summary

中文

该架构可实现虚拟私有云(Virtual Private Cloud, VPC)、本地网络(on-premises network)和站点间的完整连接,但路径较长。

English

This design provides full VPC, on-premises, and site-to-site connectivity, but the path is longer.

Transcript

03:42 side to another via this route.

03:44 Now, while this works, and so far it worked.

03:47 But there are some additional cost for this setup, right?

03:51 Cost in terms of money and cost in terms of the network hops and latency.

17. 传统方案的成本与延迟

时间范围:03:56–04:22

Extra cost and latency callout for Transit Gateway architecture

总结 / Summary

中文

传输网关(Transit Gateway, TGW)带来按 GB 数据处理费(per-GB data processing charge),并增加网络跳数(network hop)和延迟(latency)。

English

The TGW design adds per-GB data-processing charges, extra network hops, and latency.

Transcript

03:56 Right.

03:57 Because Transit Gateway has per gigabyte data processing charge.

04:01 So that would be an extra cost as well as there is a network hop there because you also introduce now

04:08 Transit Gateway.

04:09 So this might have worked so far, but has launched the SITELINK, which fixes this problem.

04:16 Now with Sitelink, you don't really need to get any devices in AWS region like a transit gateway.

18. SiteLink 的简化拓扑

时间范围:04:22–04:40

With SiteLink routing directly between Direct Connect locations

总结 / Summary

中文

使用 SiteLink 后,不必在 AWS 区域(AWS Region)部署传输网关(Transit Gateway, TGW);流量可直接通过 Direct Connect 位置和 Direct Connect 网关(Direct Connect Gateway, DXGW)转发。

English

With SiteLink, no TGW is required in an AWS Region; traffic is forwarded directly through Direct Connect locations and the DXGW.

Transcript

04:22 You can directly route traffic from your direct connect locations using the direct Connect Gateway.

04:28 What you have to do is provision just a private Vif or a transit Vif on existing connection or create

04:34 a new connection and connect it to the same direct connect gateway and you just enable the sitelink

19. 在 VIF 上启用 SiteLink

时间范围:04:40–04:50

SiteLink enabled on Private or Transit VIFs

总结 / Summary

中文

在私有虚拟接口(Private VIF)或传输虚拟接口(Transit VIF)上启用 SiteLink,即可允许站点间流量。

English

Enabling SiteLink on Private or Transit VIFs permits traffic between the connected sites.

Transcript

04:40 on those waves.

04:41 One Sitelink is enabled.

04:43 Now data can go over from one side to another, so this path is now allowed.

20. Direct Connect 位置间直达路径

时间范围:04:50–04:53

Direct traffic path between SiteLink-enabled Direct Connect locations

总结 / Summary

中文

SiteLink 让两个 Direct Connect 位置(Direct Connect Location)通过 AWS 骨干网络(AWS Backbone Network)直接交换流量。

English

SiteLink lets two Direct Connect locations exchange traffic directly over the AWS Backbone Network.

Transcript

04:50 So that is what Sitelink does.

04:52 Okay with that?

21. SiteLink 功能概览

时间范围:04:53–04:56

AWS Direct Connect SiteLink features title slide

总结 / Summary

中文

接下来总结 SiteLink 的支持接口、连接组合、路由行为、启停方式与架构能力。

English

The next slides summarize SiteLink's VIF support, connection combinations, routing behavior, activation, and architectural capabilities.

Transcript

04:53 Now let's understand some features of Sitelink.

22. 支持 Private VIF 与 Transit VIF

时间范围:04:56–05:09

SiteLink supports Private VIF and Transit VIF

总结 / Summary

中文

SiteLink 在虚拟接口(Virtual Interface, VIF)级别启用,仅支持私有虚拟接口(Private VIF)与传输虚拟接口(Transit VIF),不支持公共虚拟接口(Public VIF)。

English

SiteLink is enabled at the VIF level and supports Private and Transit VIFs, not Public VIFs.

Transcript

04:56 First of all, Sitelink is enabled at the VIF level and it is supported for private and transit Vif

05:02 only.

05:02 It is not supported for public Vif for the obvious reason that it uses direct connect gateway for routing

05:08 the traffic.

23. 控制台中的 SiteLink 选项

时间范围:05:09–05:29

Enable SiteLink checkbox in virtual interface creation form

总结 / Summary

中文

创建或修改虚拟接口(Virtual Interface, VIF)时可勾选 “Enable SiteLink”;由于启用期间按小时收费,只有确实需要时才应开启。

English

The Enable SiteLink checkbox is available when creating or modifying a VIF; because hourly charges apply while enabled, it should be selected only when needed.

Transcript

05:09 And if you create a wave, you can see that there is this setting which enables the sitelink.

05:16 Now, don't enable this setting unless you really require that kind of routing because it has additional

05:22 cost per hour and we'll talk about that.

05:24 So keep it unchecked until you really want it.

05:27 Right?

24. 支持混合连接类型与端口速率

时间范围:05:29–06:05

SiteLink supports Dedicated and Hosted Direct Connect combinations

总结 / Summary

中文

SiteLink 支持专用连接(Dedicated Connection)与托管连接(Hosted Connection)的任意组合,两端端口速率(port speed)也可不同。

English

SiteLink supports any combination of Dedicated and Hosted Connections, including different port speeds at each site.

Transcript

05:29 Sitelink is also supported on any combination of dedicated or hosted connections with different port

05:36 speeds.

05:37 What it means that if one of the site is connected to Gateway over, say, one Gbps link and another

05:44 data center is connected to same gateway over different direct connect connection over say hosted connection

05:51 of 50 Mbps.

05:53 Both terminate at the same direct connect gateway and that doesn't matter.

05:58 The traffic still routes so you don't need to have the same connection or speeds at both the ends.

06:02 They can be different.

25. 全球最短路径

时间范围:06:05–06:27

SiteLink traffic takes shortest AWS global backbone path

总结 / Summary

中文

SiteLink 在全球 Direct Connect 位置(Direct Connect Location)之间选择 AWS 骨干网络(AWS Backbone Network)的最短路径。

English

SiteLink takes the shortest AWS backbone path between Direct Connect locations worldwide.

Transcript

06:05 Now, in case of Sitelink, your traffic takes the shortest path.

06:09 Now, understand that we are now talking about the connectivity from any direct connect location to

06:15 any other in the world.

06:16 So one can be in the US, another one can be in Japan and still the traffic flows and then it goes over

06:23 the AWS Backbone network taking the shortest path.

26. 几分钟内启用或关闭

时间范围:06:27–06:43

SiteLink can be turned on or off in minutes

总结 / Summary

中文

现有虚拟接口(Virtual Interface, VIF)无需重建即可在几分钟内开启或关闭 SiteLink。

English

SiteLink can be turned on or off for an existing VIF in minutes without recreating it.

Transcript

06:27 You can turn on and off the sitelink in minutes.

06:30 Now, this is important.

06:31 You don't have to recreate anything if you have existing vifs You can also enable this setting on that

06:37 VIF and it takes into effect in few minutes or while creating the VIF.

06:41 You can also turn on those settings.

27. 支持 IPv4 与 IPv6

时间范围:06:43–06:52

SiteLink supports IPv4 and IPv6 routing prefixes

总结 / Summary

中文

SiteLink 同时支持 IPv4 与 IPv6 路由前缀(routing prefix)和数据流量。

English

SiteLink supports both IPv4 and IPv6 routing prefixes and traffic.

Transcript

06:43 It supports both IPv4 and IPv6 routing prefixes and traffic, and it can support different kind of architectures

28. 全网状与隔离连接

时间范围:06:52–07:12

SiteLink supports full mesh or isolated connectivity

总结 / Summary

中文

通过 Direct Connect 网关(Direct Connect Gateway, DXGW)、虚拟接口(Virtual Interface, VIF)和路由设计,SiteLink 可构建全网状连接(full-mesh connectivity)或隔离连接(isolated connectivity)。

English

Through DXGW, VIF, and routing design, SiteLink can provide either full-mesh or isolated connectivity.

Transcript

06:52 like a full mesh architecture where you have multiple sites and you want to connect to those, or you

06:58 want to make sure that your one site is connected to a particular site only and a third site cannot

07:05 access that data.

07:06 And what I mean by that, let's let's understand that by looking at the architecture, so full mesh

29. 全网状连接基础架构

时间范围:07:12–07:45

Full mesh SiteLink connectivity base topology

总结 / Summary

中文

跨国企业可把各数据中心连接到最近的 Direct Connect 位置(Direct Connect Location),并将相关 VIF 终止到同一个 Direct Connect 网关(Direct Connect Gateway, DXGW)。

English

A multinational company connects each data center to its nearest Direct Connect location and terminates the VIFs on one DXGW.

Transcript

07:12 connectivity.

07:13 So imagine you have your data centers across the world, you are really a multinational company and

07:20 you want to connect all these data centers together with AWS Backbone Network.

07:24 What you will do is you will connect your data centers to nearest AWS, direct connect location based

07:30 on which country and which city your data center is.

07:33 Once you connect that, you just have to create waves with a transit Vif or a private Vif on all those

07:41 direct connect connections and connect it to the same direct connect gateway.

30. SiteLink 全网状互通

时间范围:07:45–08:07

All customer sites connected in full mesh through SiteLink

总结 / Summary

中文

所有站点的虚拟接口(Virtual Interface, VIF)连接到同一个 Direct Connect 网关(Direct Connect Gateway, DXGW)并启用 SiteLink 后,各站点可形成全网状连接(full mesh)。

English

When every site's VIF attaches to the same DXGW with SiteLink enabled, all sites form a full mesh.

Transcript

07:45 Once you do that, all the sites can communicate with each other.

07:48 So that's a full mesh connectivity.

07:50 The other type of connectivity you might want to have is maybe you have your own data centers and you

07:56 want to connect to your partner networks and you could have multiple partners and you don't want that.

08:01 All these partners communicate with each other, but you should be able to communicate with Partner

08:05 one and Partner two.

31. 隔离连接模式 1

时间范围:08:07–08:19

Isolated connectivity pattern one base topology

总结 / Summary

中文

客户希望自己的数据中心同时连接多个合作伙伴(partner),但不允许合作伙伴之间互通时,可采用隔离连接(isolated connectivity)。

English

Isolated connectivity is useful when a customer must reach multiple partners while preventing partner-to-partner communication.

Transcript

08:07 So something like this, you have your own data centers and there are two partner data centers.

08:11 Now, in this case, what you will do is rather you will use two different direct connect gateways,

08:16 one for partner, one connection and another for another partner.

32. 使用不同 DXGW 隔离合作伙伴

时间范围:08:19–08:32

Separate Direct Connect Gateways isolate partner networks

总结 / Summary

中文

每个合作伙伴(partner)使用独立 Direct Connect 网关(Direct Connect Gateway, DXGW)及其 VIF,使客户可访问各合作伙伴而合作伙伴彼此隔离。

English

Each partner uses a separate DXGW and VIF, allowing customer access while isolating the partners from one another.

Transcript

08:19 And in this case, again, you will create a direct connect connection, create a whiff, connect it

08:25 to the same direct connect gateway for partner one That's a green link and you will have a VLAN tag

33. VLAN 标签区分第一条连接

时间范围:08:32–08:45

First VLAN tag for isolated SiteLink partner connection

总结 / Summary

中文

第一条边界网关协议(Border Gateway Protocol, BGP)连接使用独立虚拟局域网标签(Virtual LAN Tag, VLAN Tag),把客户流量映射到第一个合作伙伴网络。

English

The first BGP connection uses a distinct VLAN tag to map customer traffic to the first partner network.

Transcript

08:32 on that BGP connection.

08:34 Now, once that happen, this customer can talk to the partner one but cannot talk to partner two.

08:40 Now if you want to enable the communication, you just create another VIF on top of the same connection

34. 第二个 VLAN 标签与合作伙伴

时间范围:08:45–09:28

Second VLAN tag completes isolated partner connectivity

总结 / Summary

中文

在同一物理连接上创建另一个使用不同虚拟局域网标签(VLAN Tag)的虚拟接口(Virtual Interface, VIF),即可接入第二个独立 Direct Connect 网关(Direct Connect Gateway, DXGW)和合作伙伴。

English

A second VIF with a different VLAN tag on the same physical connection reaches another isolated DXGW and partner.

Transcript

08:45 of course with different VLAN tag and then another partner will have the direct connect connection and

08:52 it also creates the wave which connects to the another direct connect gateway.

08:57 Once you do that, you have now isolated network connectivity using the Sitelink and direct connect.

09:04 There is one more pattern where it looks similar, but maybe you have your own data centers.

09:10 There are no partners, but then within that you have network segregation.

09:13 For example, there is a production network and there is a test setup network and you don't want production,

09:19 network and test network to go over the same connection.

09:23 Then also you can achieve that, but just that in this case you need to take care of, you know, routing

35. 隔离连接模式 2

时间范围:09:28–09:35

Isolated connectivity pattern two base topology

总结 / Summary

中文

第二种隔离模式用于同一企业的生产网络(production network)与测试网络(test network)分段。

English

The second isolation pattern separates production and test networks within the same enterprise.

Transcript

09:28 at your end as well.

09:29 What I mean by that is in this case, you will create a similar connections, as we said.

36. 测试网络专用路径

时间范围:09:35–09:52

Test network isolated over dedicated SiteLink path

总结 / Summary

中文

测试网络(test network)使用独立连接、虚拟接口(Virtual Interface, VIF)、虚拟局域网标签(VLAN Tag)和 Direct Connect 网关(Direct Connect Gateway, DXGW)。

English

The test network uses a dedicated connection, VIF, VLAN tag, and DXGW path.

Transcript

09:35 So this Amber line is about, say, a test network, right?

09:39 You connect using the two different direct connect connections and terminating the Wips into the same

09:45 direct connect gateway.

09:47 And at your router you will have the virtual routing forwarding enabled.

37. 使用 VRF 强制流量隔离

时间范围:09:52–10:11

Virtual Routing and Forwarding labels on customer routers

总结 / Summary

中文

客户路由器必须配置虚拟路由转发(Virtual Routing and Forwarding, VRF),确保测试工作负载只使用测试路径。

English

Customer routers use Virtual Routing and Forwarding (VRF) so test workloads remain on the test path.

Transcript

09:52 So this router should understand that all the traffic going to this test workload goes through this

09:58 link only.

10:00 Now once that is done you can have similar setup for a prod network.

10:05 For example, you will have another set of connection whips connecting to different direct connect gateway

38. 生产与测试完整隔离

时间范围:10:11–10:24

Production and test traffic isolated with separate VRFs and SiteLink paths

总结 / Summary

中文

生产网络(production network)建立另一组连接、VIF、Direct Connect 网关(DXGW)与虚拟路由转发(VRF),从端到端隔离生产和测试流量。

English

A second set of connections, VIFs, DXGW, and VRF keeps production and test traffic isolated end to end.

Transcript

10:11 to redirect that traffic to the prod workload only so you can very well set this kind of isolated connectivity

10:18 as well.

10:19 So pretty much that's it about the Sitelink, just that you also need to know about the cost.

39. SiteLink 成本与最终总结

时间范围:10:24–11:33

AWS Direct Connect SiteLink cost and feature summary

总结 / Summary

中文

SiteLink 在 VIF 上启用期间按小时收费,课程示例为每小时 0.50 美元,即使没有流量也会计费;另有按源和目标 Direct Connect 位置(Direct Connect Location)计算的数据传输费(data transfer charge)。因此只在需要时启用,并用最新 AWS 定价核实成本。

English

SiteLink incurs an hourly charge while enabled on a VIF—shown in the lecture as $0.50 per hour even with no traffic—plus data-transfer charges based on source and destination Direct Connect locations. Enable it only when needed and verify current AWS pricing.

Transcript

10:24 As I said, there is a cost per hour of the sitelink while it is enabled on the wave.

10:30 So if you tick that box here, then there will be $0.5 per hour, which is a lot of cost.

10:37 So even if you are not using the Sitelink feature or you are not transferring the data, but you have

10:44 ticked this, then also you will pay for this cost.

10:47 So be aware of that.

10:48 And then there is also a data transfer cost similar to the direct connect data transfer cost.

10:54 It depends on what the source is and what the destination is from where the traffic is coming with respect

11:00 to the direct connect locations.

11:01 So if distance is too much, then there will be additional cost.

11:05 But if it is within the same GEO, typically it is $0.02 per GB similar to the cost basically.

11:12 So these are the cost factor for SITELINK.

11:16 So that's it about the Sitelink.

11:18 Just one thing you need to remember if you want to connect multiple customer data centers using AWS

11:23 Backbone Network or a direct connect, then you can use AWS Sitelink.

11:29 So that's it for this lecture.

11:31 Thank you.

整讲总结 / Overall Summary

中文

AWS Direct Connect SiteLink 在私有虚拟接口(Private VIF)或传输虚拟接口(Transit VIF)级别启用,让不同 Direct Connect 位置(Direct Connect Location)之间的流量直接走 AWS 全球骨干网络(AWS Global Network Backbone),绕过 AWS 区域(AWS Region)并选择最短路径。它支持专用连接(Dedicated Connection)与托管连接(Hosted Connection)的混合组合、IPv4/IPv6、全网状和隔离连接。通过多个 Direct Connect 网关(Direct Connect Gateway, DXGW)、VLAN 标签和虚拟路由转发(Virtual Routing and Forwarding, VRF),可隔离合作伙伴或生产/测试网络。SiteLink 启用期间持续产生小时费,并另计数据传输费。

English

AWS Direct Connect SiteLink is enabled on Private or Transit VIFs and sends traffic directly between Direct Connect locations over the AWS Global Network Backbone, bypassing AWS Regions and taking the shortest path. It supports mixed Dedicated and Hosted Connections, IPv4/IPv6, full-mesh, and isolated designs. Multiple DXGWs, VLAN tags, and VRFs can isolate partner or production/test networks. Hourly SiteLink charges accrue while enabled, with additional data-transfer charges.

返回顶部 ↑