AWS re:Invent 2015 | (NET403) Another Day, Another Billion Packets

In this session, we walk through the Amazon VPC network presentation and describe the problems we were trying to solve when we created it. Next, we walk through how these problems are traditionally solved, and why those solutions are not scalable, inexpensive, or secure enough for AWS. Finally, we provide an overview of the solution that we've implemented and discuss some of the unique mechanisms that we use to ensure customer isolation, get packets into and out of the network, and support new features like VPC endpoints.

[@rohrvy1989]

one of the best reinvent talk which is technical as well simple to understand..Thanks Eric for throwing some light on behind the scenes of VPC..

[@russelllane4006]

Thank you,
The peek behind the curtain was most interesting. I have this tagged to share with sceptical network engineers and auditors who want to say it can't work (now most are too smart to say it out loud).

[@ced4298]

I'm a database guy. But wanted to learn more about VPC....probabaly should have started at a lower level. Blew my Mind!

[@jazzzzzuz]

you got an amazing presentation skill, One of the best session on AWS re:invent.

[@hadfiiw]

Great stuff! Thanks for explaining this for us "old network" folk. It now totally makes sense and is a great way of solving all those traditional networking issues.
I really hope the "three different ones" was a homage to Pink Floyd's "Pigs"....

[@ebrandwine]

I gave this talk years ago, and always wondered if anyone caught that...

[@RajWankhede]

@@ebrandwine I joined AWS 2months back and coming from networking background (worked on L2/L3VPNs) I always wondered what actually VPC is. And the moment you said it is VRF - it all just made sense to me.

[@Dilssaaa]

@@RajWankhedethis makes so much sense now

[@Manarinni]

Great content and awesome presentation!

[@Douglas_Aguirre]

What a great video!

[@jakubbujny7454]

perfect presentation

[@manojitsahasardar]

Awesome!!

[@garretblankenship206]

Really great talk

[@willhi5]

I would like to know exactly where the NACL enforcement (layer 2 firewall?) is done vis a vis the mapping service, as opposed to the security group enforcement which he explains as layer 4 distributed firewall.

[@paradisetravel347]

32:00 my favorite part of the video

[@__anthonyng]

enlightening!

[@bogusphone8000]

In Regard to ARP:
What happens when the instance is running virtual interfaces (i.e. virtual routing lab with multiple interfaces)? We need ARP discovery to discover those virtual (non-AWS) interfaces.

[@baguette_boi1409]

this guy is literally Gilfoyle from Silicon Valley

[@SeduireCa]

Didn't know Jeb Bush was into networking. Pretty cool

[@JeremyMcMillan]

LIke Ma Bell.