Lecture 147: DX Summary and Exam Essentials
- 课程：[NEW] AWS Certified Advanced Networking Specialty 2026
- 视频时长：10:48
- 来源：Udemy Lecture 27899000
- Slide 数量：29
- 画面切换：00:09、00:13、00:34、00:46、01:12、01:30、01:49、02:01、02:38、02:56、03:18、03:43、04:37、05:58、06:20、06:27、06:31、06:45、06:58、07:38、08:00、08:24、08:42、08:59、09:07、09:18、09:30、09:43
扫描说明
逐条检查了 Udemy 页面中的 140 条 Transcript cue，并扫描了全长约 10:48 的视频。该讲由 Direct Connect Summary 与 Exam Essentials 两组逐步展开的课件组成；每个新标题、分页或新增要点均单独作为一个小节，共识别 29 个画面阶段。最终截图均在精确 Transcript cue 定位后关闭 Transcript 侧栏、恢复完整横向播放器，并让视频短暂播放以隐藏中央控件；29 张图片均无黑边、无顶部课程栏、无底部或中心播放器控件，也无右侧或下方裁切，并统一输出为 1364×770。
Transcript 来自 Udemy 页面自带的英文自动字幕，没有使用 ASR。下面保留页面原文，包括其中的语法或识别错误。
1. Direct Connect Summary 标题
时间范围：00:00–00:09
总结 / Summary
中文
本讲先汇总 AWS Direct Connect（DX）的核心概念，再提炼认证考试需要记忆的关键限制和设计原则。
English
The lecture first summarizes the core AWS Direct Connect concepts and then distills the limits and design principles most relevant to the exam.
Transcript
00:00 Okay with that.
00:01 Now let's look at the summary.
00:02 What we saw so far for Direct Connect.
00:05 And then we'll also touch upon some of the important things for your exam.
2. Summary 要点框架
时间范围：00:09–00:13
总结 / Summary
中文
总结部分采用逐项展开方式回顾参与方、连接组成、虚拟接口（Virtual Interface，VIF）、高可用性（High Availability）和排障主题。
English
The summary progressively reviews the parties, connection components, virtual interfaces, high availability, and troubleshooting topics.
Transcript
00:09 So with Direct Connect understand the various parties involved.
3. DX 参与方
时间范围：00:13–00:34
总结 / Summary
中文
Direct Connect（DX）部署涉及 DX 位置提供商（DX Location Provider）、Direct Connect 合作伙伴（Direct Connect Partner）以及把线路回传到客户数据中心的网络服务商（Network Provider）。
English
A Direct Connect deployment involves the DX location provider, a Direct Connect partner, and the network provider that carries connectivity back to the customer data center.
Transcript
00:13 You know that for direct connect connection you need to have the direct connect location provider direct
00:18 connect partner.
00:19 And also you need to have the physical connectivity from the Direct Connect location back to your data
00:25 center and understand the process of setting up the Direct Connect connection when you go for a dedicated
00:31 connection and a hosted connection.
4. DX 连接网段与设备
时间范围：00:34–00:46
总结 / Summary
中文
应理解连接路径中的 AWS 设备/路由器（AWS Device/Router）、客户路由器（Customer Router）、交叉连接（Cross-Connect）和虚拟接口（Virtual Interface，VIF）。
English
Know the connection path components: the AWS device/router, customer router, Cross-Connect, and Virtual Interfaces.
Transcript
00:34 Also understand various segments involved in connection, for example AWS device Router, Customer Router,
00:41 Cross connect and then you have to finally create virtual interfaces.
5. Dedicated 与 Hosted Connection
时间范围：00:46–01:12
总结 / Summary
中文
Direct Connect 连接分为专用连接（Dedicated Connection）与托管连接（Hosted Connection）；二者在端口容量、合作伙伴参与和 VIF 配额上不同。
English
Direct Connect offers Dedicated and Hosted Connections, which differ in port capacity, partner involvement, and VIF quotas.
Transcript
00:46 Now there are two types of the connection dedicated connection and hosted connection.
00:50 And we also saw the difference between the two.
00:53 Dedicated connection provides you connection bandwidth of one GB, ten GB or 100 GB And with hosted
01:00 connection.
01:00 You can also get the sub one GB bandwidth.
01:04 Now, in order to actually have the traffic flowing through, you need to have virtual interfaces created
01:10 on top of direct connect connection.
6. Public、Private 与 Transit VIF
时间范围：01:12–01:30
总结 / Summary
中文
三类虚拟接口（Virtual Interface，VIF）分别是 Public VIF、Private VIF 和 Transit VIF，用于连接公共 AWS 服务、VPC 私有资源或 Transit Gateway（TGW）。
English
The three VIF types are Public, Private, and Transit VIFs, used for public AWS services, private VPC resources, and Transit Gateway connectivity.
Transcript
01:12 Those interfaces could be public, private or transit.
01:15 So we call it public vif or private vif or transit VIF.
01:20 Now with transit vif you can connect the direct connect connection to a transit gateway.
01:26 But that connection has to go through the direct connect gateway.
7. TGW 与 DX Gateway 集成
时间范围：01:30–01:49
总结 / Summary
中文
Transit VIF 通过 Direct Connect Gateway（DX Gateway）与 Transit Gateway（TGW）集成，为多个 VPC 和本地网络提供可扩展的集中式连接。
English
A Transit VIF integrates Transit Gateway with a Direct Connect Gateway to provide scalable centralized connectivity for multiple VPCs and on-premises networks.
Transcript
01:30 So it would be a direct connect location.
01:32 From there you will create transit VIF transit VIF will connect to the Direct Connect Gateway, and
01:38 Direct Connect Gateway will connect to the Transit Gateway.
01:41 Now also understand the routing policies and BGP communities for public and private waves.
8. VIF 路由策略与 BGP Community
时间范围：01:49–02:01
总结 / Summary
中文
考试需要掌握 Public/Private VIF 的路由策略（Routing Policy）和 BGP 社区（BGP Community），因为它们会影响前缀接收、通告范围与路径选择。
English
Know the routing policies and BGP communities for Public and Private VIFs because they influence prefix reception, advertisement scope, and path selection.
Transcript
01:49 So these are some important topics that you must understand before going into the exam.
01:55 You should also understand what is link aggregation group, and you know that you can aggregate multiple
9. Link Aggregation Group
时间范围：02:01–02:38
总结 / Summary
中文
链路聚合组（Link Aggregation Group，LAG）可把多条相同速率的专用连接（Dedicated Connection）组合成一个逻辑连接，以提高聚合带宽并简化管理。
English
A Link Aggregation Group combines same-speed Dedicated Connections into one logical connection for higher aggregate bandwidth and simpler management.
Transcript
02:01 direct connect connections as a one logical connection in the form of lag, and then also understand
02:08 the prerequisites for creating the lags.
02:11 For example, all the connections should terminate on the same AWS Direct Connect endpoint, and the
02:17 connection bandwidth should also be the same.
02:20 Either one GB s or ten GB s.
02:22 For 100 GB s connection, only two connections can be clubbed together to get the aggregate bandwidth
02:29 of 200 GB s.
02:31 Now, for fast detection of failure, you can enable the BFD on the Direct Connect connection.
10. BFD 快速故障检测
时间范围：02:38–02:56
总结 / Summary
中文
双向转发检测（Bidirectional Forwarding Detection，BFD）可在约 1 秒内发现链路故障，加快 BGP 路径向备用连接的收敛。
English
Bidirectional Forwarding Detection can identify a link failure in about one second and accelerate BGP convergence to an alternate path.
Transcript
02:38 And with BFD as you remember, you can get the failover detected in less than one second.
02:45 Then we also saw some of the highly available architectures for Direct Connect, and we saw how you
02:50 can have the multiple AWS devices to start with.
11. DX 高可用架构
时间范围：02:56–03:18
总结 / Summary
中文
Direct Connect 高可用性（High Availability）可通过双设备（Dual Device）、双位置（Dual Location）和必要时的 VPN 备份消除单点故障（Single Point of Failure）。
English
Direct Connect high availability uses dual devices, dual locations, and optional VPN backup to remove single points of failure.
Transcript
02:56 You could also leverage multiple AWS Direct Connect locations for better availability and for maximum
03:03 resiliency.
03:03 You can even have the multiple DCS location with multiple failover direct connect connection.
03:10 And we have also seen the architectures supporting that.
03:14 Then with respect to DCS security, we talked about the DCS encryption.
12. VPN over DX 与 MACsec
时间范围：03:18–03:43
总结 / Summary
中文
Direct Connect 流量可在第 3 层使用 VPN over DX 加密，或在受支持的专用连接（Dedicated Connection）和位置上使用 MAC Security（MACsec）实现第 2 层加密。
English
Direct Connect traffic can be encrypted at Layer 3 with VPN over DX or at Layer 2 with MACsec on supported Dedicated Connections and locations.
Transcript
03:18 And for selected direct connect location you can enable the Macsec security.
03:23 Or you can also go with VPN over ADX.
03:26 Now if you remember for VPN or DCS you need to use the public VIF.
03:30 And then you can use Virtual Private Gateway public IP addresses to terminate that VPN connection.
03:36 And we also saw direct connect network performance with respect to the MTU and jumbo frames.
13. MTU 与 Jumbo Frame
时间范围：03:43–04:37
总结 / Summary
中文
Direct Connect 支持标准最大传输单元（Maximum Transmission Unit，MTU）以及巨型帧（Jumbo Frame）；端到端设备必须使用一致 MTU 才能避免分片或丢包。
English
Direct Connect supports standard MTU and Jumbo Frames, but all devices along the path must use compatible MTU settings to avoid fragmentation or drops.
Transcript
03:43 And if you remember we said that jumbo frames are supported now after 2018.
03:48 And for public VIF those are not supported but those are supported for private VIF and transit VIF For
03:56 private vif, you can use jumbo frames of size 9001 bytes, and for transit VIF you can use jumbo frame
04:03 of 8500 bytes.
04:05 Now also make sure that underlying direct connect connection or a lag is also enabled for jumbo frames
04:13 before you enable it at the VIF level.
04:15 And if you are enabling it at VIF level and there is already a connection and VIF is already active,
04:21 in that case, you may face some disruption of the network up to 30s.
04:27 And then we also talk about the Direct Connect billing.
04:30 And you know that direct connect provides two type of the charges port or charges and the data transfer
14. DX 计费
时间范围：04:37–05:58
总结 / Summary
中文
Direct Connect 费用主要包括端口小时费（Port-Hour Charge）和从 AWS 传出的数据传输费（Data Transfer Out Charge）；架构选择还会叠加 TGW 或终端节点的数据处理成本。
English
Direct Connect pricing centers on port-hour charges and Data Transfer Out charges, with possible additional TGW or endpoint processing costs depending on the architecture.
Transcript
04:37 out charges.
04:38 Now port charges depends on the direct connect bandwidth that you are opting for.
04:44 And typically across the world, except Japan, all the direct Connect location has the same charges
04:51 for port R now for Direct connect, dedicated connection.
04:55 There are different port charges for different bandwidths and same applies to the hosted connection
05:01 as well.
05:02 Now data transfer out charges would depend on a lot of factors, but primarily it depends on the direct
05:09 connect location and the AWS region which is originating the traffic.
05:13 So depending on that data transfer charges would be levied.
05:17 Now who owns the charges or who pay the bill for direct connect charges would depend on the multiple
05:24 factors like for porters.
05:25 The AWS account which creates that connection would pay for the porters.
05:31 But in case of data transfer out, the AWS resource which sends that traffic through the webs will typically
05:38 pay for that data transfer out charges.
05:42 Now, there are certain exceptions when you use transit gateways.
05:45 And we have also talked about that use case.
05:48 Finally we also saw direct connect troubleshooting.
05:51 Now direct connect failure may happen at different layers, and depending on at which layer the issues
15. DX 分层排障
时间范围：05:58–06:20
总结 / Summary
中文
排障应从第 1 层（Layer 1）物理信号开始，再检查第 2 层（Layer 2）的 VLAN/ARP，以及第 3/4 层（Layer 3/4）的 BGP、TCP 和路由。
English
Troubleshoot from Layer 1 physical signals through Layer 2 VLAN/ARP and then Layer 3/4 BGP, TCP, and routing.
Transcript
05:58 are whether layer one, two or 3 or 4.
06:00 There are different troubleshooting steps.
06:02 So essentially these are the things that we saw in this section.
06:05 And and I would say most of these topics are important for your exam.
06:10 Now let's pick up few points out of this.
06:14 All the topics that we saw and which you need to remember for your exam.
16. Exam Essentials 标题
时间范围：06:20–06:27
总结 / Summary
中文
考试要点部分把前述内容压缩为需要直接识别的端口规格、协议、配额、路由和高可用性（High Availability）事实。
English
The Exam Essentials section compresses the material into port specifications, protocols, quotas, routing, and high-availability facts that should be recognized directly.
Transcript
06:20 So first thing, AWS Direct Connect provides the bandwidth in one or 10 or 100 GB s dedicated connection.
17. Dedicated 与 Hosted 带宽
时间范围：06:27–06:31
总结 / Summary
中文
专用连接（Dedicated Connection）提供 1、10 或 100 Gbps，低于 1 Gbps 的容量通常通过托管连接（Hosted Connection）获得。
English
Dedicated Connections provide 1, 10, or 100 Gbps, while sub-1-Gbps capacities are generally delivered as Hosted Connections.
Transcript
06:27 Or you can get sub one GB s with hosted connections.
18. BGP 与 802.1Q VLAN
时间范围：06:31–06:45
总结 / Summary
中文
Direct Connect 使用边界网关协议（Border Gateway Protocol，BGP）交换路由，并用 IEEE 802.1Q VLAN 标签在同一物理连接上隔离不同虚拟接口（Virtual Interface，VIF）。
English
Direct Connect exchanges routes with BGP and uses IEEE 802.1Q VLAN tags to separate VIFs on the same physical connection.
Transcript
06:31 Now BGP protocol is used to exchange the routes and for the physical network you use 8021Q Vlan tags
06:40 so that you can separate the traffic on the same connection using different waves.
19. Public 与 Private VIF 作用域
时间范围：06:45–06:58
总结 / Summary
中文
Public VIF 提供到公共 AWS 资源的全局连接；Private VIF 提供到 VPC 内私有资源的连接。Transit VIF 则用于 Transit Gateway（TGW）。
English
A Public VIF reaches public AWS resources globally, while a Private VIF reaches private resources inside a VPC. A Transit VIF is used with Transit Gateway.
Transcript
06:45 Now Public Wave provides the global connectivity to the public, AWS resources and private wave or a
06:51 transit.
06:52 VIF allows you to access the resources inside your VPC.
20. Hosted Connection 的 VIF 限制
时间范围：06:58–07:38
总结 / Summary
中文
托管连接（Hosted Connection）通常每条连接只允许一个虚拟接口（Virtual Interface，VIF），因此设计时要区分连接类型对应的配额。
English
A Hosted Connection generally allows only one VIF per connection, so quotas must be evaluated according to the connection type.
Transcript
06:58 Further, there are say, limits or quotas as per the type of the connection as in how many ways you
07:04 can create.
07:04 So for hosted connection, you can just create one VIF.
07:08 Whether you create a private VIF or a public VIF or a transit wave.
07:12 Now if it's a dedicated connection, then this limit is much higher and this limit will always change.
07:19 So as of today, you can create up to 50 public or private waves.
07:22 And you can create for transit waves.
07:25 But overall together the limit is 51 waves.
07:29 And as I said this limit can change any time in the future.
07:32 Right now you also need to remember what parameters you provide while creating the direct connect connection.
21. 创建 DX Connection 的参数
时间范围：07:38–08:00
总结 / Summary
中文
创建 Direct Connect 连接（DX Connection）时需确定 Direct Connect 位置（DX Location）、端口速度、服务商及其他物理连接参数。
English
Creating a Direct Connect connection requires selecting the DX location, port speed, provider, and other physical-connection parameters.
Transcript
07:38 Like for example, when you create a dedicated connection, you select the direct connect location,
07:44 your bandwidth and other parameters that we saw while creating that connection.
07:49 So just refer to that lecture if you are not aware of those parameters.
07:54 Similarly, you need to remember the parameters required while creating the public, private or transit
22. 创建各类 VIF 的参数
时间范围：08:00–08:24
总结 / Summary
中文
创建 Public、Private 或 Transit VIF 时要正确配置 VLAN、BGP ASN、Peer IP、认证密钥以及所关联的网关（Gateway）。
English
Creating Public, Private, or Transit VIFs requires the correct VLAN, BGP ASN, peer IPs, authentication key, and associated gateway.
Transcript
08:00 wave.
08:00 Now important parameters of course, are the for example the Vlan tags.
08:05 Now in case of hosted connection, you know the Vlan tags are automatically provided by the direct connect
08:11 partner from which you are taking the hosted connection.
08:13 And in that case, you can't set that at the time of creation.
08:17 Also, you need to understand the what mechanism BGP takes to route the traffic over the Direct Connect.
23. BGP 路径选择与故障转移
时间范围：08:24–08:42
总结 / Summary
中文
BGP 路径选择（BGP Path Selection）与故障转移可通过 AS_PATH、MED、Local Preference 及路由通告（Route Advertisement）等属性影响。
English
BGP path selection and failover can be influenced with AS_PATH, MED, Local Preference, and route advertisements.
Transcript
08:24 And we saw how the routes are influenced using various BGP parameters like as Path or Med or local preference.
08:34 So just refer to the routing policies and BGP communities to just refresh your knowledge on the same.
24. VIF 路由策略与 BGP Community
时间范围：08:42–08:59
总结 / Summary
中文
必须理解 VIF 路由策略（VIF Routing Policy）和 BGP 社区（BGP Community）如何控制 AWS 接收、通告及优先选择的前缀。
English
Understand how VIF routing policies and BGP communities control which prefixes AWS accepts, advertises, and prefers.
Transcript
08:42 And we also saw the VRF routing policies and BGP communities.
08:45 And they act differently when it comes to the public VIF Versus the private vif or transit vif.
08:52 We also saw the lag that is link aggregation group, and you can combine multiple DX connections to
25. LAG 聚合带宽
时间范围：08:59–09:07
总结 / Summary
中文
链路聚合组（Link Aggregation Group，LAG）把多条专用连接组合起来，以获得更高的聚合 Direct Connect 带宽。
English
A Link Aggregation Group combines multiple Dedicated Connections to provide higher aggregate Direct Connect bandwidth.
Transcript
08:59 have a aggregated DX bandwidth.
09:01 And we also saw some of the limitations or prerequisites for creating the lags to reduce the failover
26. BFD 一秒级收敛
时间范围：09:07–09:18
总结 / Summary
中文
双向转发检测（Bidirectional Forwarding Detection，BFD）可以约 1 秒发现连接故障并触发到备用路由的故障转移（Failover）。
English
BFD can detect a connection failure in about one second and trigger failover to an alternate route.
Transcript
09:07 time when the primary link goes down.
09:10 You can use something called BFT, and with BFD you can get the failover time less than one second.
27. DX 高可用选项
时间范围：09:18–09:30
总结 / Summary
中文
Direct Connect 高可用选项（High Availability Option）包括双设备、双位置以及 VPN 备份，组合方式取决于业务的恢复时间和成本目标。
English
Direct Connect high-availability options include dual devices, dual locations, and VPN backup, selected according to recovery-time and cost objectives.
Transcript
09:18 For DX options, you can use dual devices or dual locations, and you can also in some cases use VPN
09:26 as a backup.
09:27 Now you can also enable the encryption on Direct Connect.
28. Public VIF 上的 VPN over DX
时间范围：09:30–09:43
总结 / Summary
中文
Public VIF 会包含硬件 VPN 的公共 IP 地址，因此可在 Direct Connect 连接上建立 VPN（VPN over DX）以加密流量。
English
A Public VIF includes public IP addresses usable by a hardware VPN, enabling VPN over the Direct Connect connection.
Transcript
09:30 For that you can use the public IP addresses.
09:34 And for that you would have to use public VIF.
09:37 Now, with respect to the IP prefixes to be published over a private VIF or a public VIF, remember
29. Private 与 Public VIF 路由配额
时间范围：09:43–10:48
总结 / Summary
中文
客户侧向 AWS 通告的路由上限为：Private VIF 最多 100 条前缀，Public VIF 最多 1000 条前缀；超过限制会影响 BGP 会话（BGP Session）或路由接收。
English
From the customer side, a Private VIF can advertise up to 100 prefixes and a Public VIF up to 1,000; exceeding these limits can affect the BGP session or route acceptance.
Transcript
09:43 that you can only advertise 100 routes over a private wave and maximum 1000 prefixes over a public wave.
09:52 Now, if you advertise more than this, then your BGP session goes down and then routing won't happen.
10:00 So there are lot many points.
10:03 But then I try to capture the most important one.
10:06 And I'm sure this would help you in your exam.
10:09 Now with that we will wrap up the Direct Connect section.
10:13 I hope you learned a lot of new things about the Direct Connect, and you feel confident about Direct
10:18 Connect now.
10:21 So thanks for watching.
10:22 I know this has been a longer section, but this is one of the most important section for your exam
10:30 and try to get good hold of everything that we talked about in this section.
10:35 Maybe not everything will come into the exam, but it's always good to go over that to backup yourself
10:40 for any kind of questions on Direct Connect.
10:43 So that's it for this section and thanks for watching.
整讲总结 / Overall Summary
中文
本讲将 Direct Connect（DX）的考试重点归纳为四组：第一，理解参与方、设备、Cross-Connect、Dedicated/Hosted Connection 及 Public/Private/Transit VIF；第二，掌握 Transit Gateway（TGW）与 DX Gateway、路由策略、BGP Community、LAG、BFD 和高可用性（High Availability）；第三，理解 VPN over DX、MACsec、MTU/Jumbo Frame、计费与分层排障；第四，牢记端口速率、802.1Q VLAN、Hosted Connection 单 VIF、VIF 创建参数、BGP 路径属性，以及 Private VIF 100 条和 Public VIF 1000 条前缀的通告上限。
English
The exam essentials fall into four groups: understand the parties, devices, Cross-Connect, Dedicated/Hosted Connections, and Public/Private/Transit VIFs; know TGW and DX Gateway integration, routing policies, BGP communities, LAG, BFD, and high availability; understand VPN over DX, MACsec, MTU/Jumbo Frames, pricing, and layered troubleshooting; and memorize port speeds, 802.1Q VLANs, the Hosted Connection single-VIF rule, VIF creation parameters, BGP path attributes, and the 100-prefix Private VIF and 1,000-prefix Public VIF advertisement limits.
返回顶部 ↑