For anybody using this in 2024, when you launch your EC2 instances at 41:05 , you must set --metadata-options HttpTokens=optional as EC2 now defaults to using IMDSv2, which will break the user-data script as it uses IMDSv1 to get the metadata.
This worked to an extent - it gives me 'This instance is in the subnet wih ID:' but not actually filling out the subnet id - do you know why. My metadata options are definitely what you said here.. thanks :)
I have paid for multiple courses and your free content is 100× better and more clear! Thank you so much I subbed to this guys personal channel he deserves way more.
What a very useful video! It unravels any confusion around vpc and a lot of stuff going on around it. But it's indeed a heavy topic tho. 1:36:24 actually if you want to delete bucket policy without login as root or deleting your bucket, you can do: aws s3api delete-bucket-policy --bucket
The explanation of IP address classes conflates private addresses and classes. The addressable range given is much bigger than you say - it's just that the private network within the range has those limits. It'd be clearer to give the full range, and if you need an example, don't choose the private range as your example network.
@@zimcanit6647 i also took the SAA-C02 course from ACloudGuru. Both ACloud’s and Neal’s are close to the actual AWS exam. Wishing you all the best if you’re planning to take the certification 🎉
Can you tell me how this certification helped you... It's been 1.5 years... What are you doing these days? I am also planning to take this certificate.
@@sarwarmehdi714 Hello. This course from Neal helped me a lot not only just to pass the exam but for my day to day work as an AWS Consultant. The best practices on the course helped me design a well architected and cost effective cloud solution. After I passed the exam, career opportunities opened up and it boosted my career and overall market value. I highly recommend Neal’s course and any AWS related courses that you think will help you to ace the exam cause reward out there is very generous it may not be on your current employment but generally in the tech space. To date, I am a Blockchain developer now and still working on some cloud projects from time to time whenever the opportunity permits. Best of luck to you and hope you share your journey here soon 🙇♂️
just want to say thanks for this content! I've watch and learn VPC too many times for now from a different course, but your content finally made me understood the big picture. I really like the diagram, it help me understand how everything is connected.
so many paid courses on this topic, yet it is that one freely available video on TH-cam that clears all our doubts. Thank you so much for such a great lesson.
I have done the AWS certification course by Neal, and it was really good! The format of first theory then lab, and the well thought-out examples are very very useful!
I thanks Neil, from the bottom of my heart for providing this content for free & also putting some much effort in explanation & visualization for easy understanding, may god bless you with good fortune.
Fantastic course. Thank you for putting together this high quality and clear material on such a complex and detailed topic. If I may suggest a small addition you might consider: it would be wonderful to have an end section with a glossary, and perhaps a high level summary (review) of the course.
- VPNs because of using the public internet are subject to it's bandwidth constraints and latency issues that arise - DX is a private connection into AWS - not shared, not public - In the DX location, AWS has an AWS cage - rack where they have their own equipment. Then there's the Customer or Partners cage - your rack with own equipment or rented from a partner - Both of these cages will have a router - AWS DX router and Customer DX router, respectively
Neal, Thank you so much for this incredible video 👍 Question: Could youkindly share the link to the subnetting calculator you mentioned at 25:48 please? Thank you
At the 42 minute mark what cli was he using to spin up that instance? i know he was using the amazon cli but was he using a different virtual machine entirely and he ssh into in or a aws ec2 instance and he ssh into that and ran those aws cli commands?
If you look at the RFC 1918 range, why would an EC2 instance deployed simply to host a web app require so many addresses? (I know its the technical limit but my question is the practical need for such a huge range) Isn't just one adress for the machine itself enough? Or this taking into consideration that tomorrow there could be hundreds of docker containers that require their own network address? Can anyone throw some light on this?
Great content and so smooth with his delivery. I do have a question. At timestamp: 40:37 how do we change to our amazon vpc directory? I have tried and tried to get there but i am stuck. Help! lol
Hey neal, you told earlier in this video that the network acl are applied to subnet level, and SG are applied to EC2/instance level, we got it, but here you are applying the Network ACL to VPC, its working , can you give some justifcation. And great video!!!
This is an absolute delight. I had the pleasure of reading something similar, and it was an absolute delight. "Mastering AWS: A Software Engineers Guide" by Nathan Vale
After deleting the NAT gateway. when I went for deleting Elastic IP, the only option I have is to release it? Would releasing the Elastic IP be same as deleting it? I don't want to incur any charges. Thanks.
In the private IP address range, you have mentioned 172.32.x.x which is actually a public address routable over the internet. Please confirm whether any recent changes come in Private and public IP address ranges?
Awesome Sir, it will be great if a free certificate of completion can be added and included with all these courses and it will be very very helpful for many people's like me who can't afford paid Vendor Certifications
what are the other ways VPCs communicate with each other if not VPC peering ? Say I have a application VPC and DB VPC , how can i essentially make them communicate ?
The switching back and forth between production and neal account, how to do it? sorry got lost on this part, I am a begineer. Any suggestion or help on what document to look for. I tried to search and found Switch Role but i think it is to assume role for instances :D
Everything is superb, but speed of the explanation can be reduced a bit as it would be harder for beginner to grasp where things are getting connected or peered etc
@55:30 for inbound and outbound rules, we are allowing all traffic both directions... When these rules are evaluated in order what is the point in even adding deny rules? Can someone please clarify.. Thanks
Unable to connect to instance in private subnet from browser as well as using ec2 connect, also when I connect to instances in public they are working fine but not displaying subnet name , what could be the problem, ?
This is enlightening. I read a similar book that was a paradigm shift. "AWS Unleashed: Mastering Amazon Web Services for Software Engineers" by Harrison Quill
At 24:51 a route table is shown. How is something starting with 10 is called public subnet. My understanding so far was any IP starting with 10 is private. Can anyone help me to understand this.
I was not able to do the section because I do not have the Key Pair setup seen at 40:01 and I do not know how Neal set it up. Does anyone know how Neal set his up?
Hi Neal - Can you explain how you get the number of networks available for a range of IPv4 addresses like CIDR, Class A, B and C? I get how you get the number of usable addresses per network.
Class A networks do not use the left most bit in the 1st octet. It's always fixed with a value of 0. Therefore the possible networks available in Class A network is 2 to the power 7 i.e., 128 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 126 valid Class A networks. Each network has 2 to the power 24 i.e., 16,777,216 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 16,777,214 valid Host IP address for each Class A network. Class B networks do not use the left most 2 bits in the 1st octet. It's always fixed with a value of 10. Therefore the possible networks available in Class A network is 2 to the power 14 i.e., 16,384 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 16,382 valid Class B networks. Each network has 2 to the power 16 i.e., 65,536 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 65,534 valid Host IP address for each Class B network. Class C networks do not use the left most 3 bits in the 1st octet. It's always fixed with a value of 110. Therefore the possible networks available in Class A network is 2 to the power 21 i.e., 2,097,152 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 2,097,150 valid Class C networks. Each network has 2 to the power 8 i.e., 256 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 254 valid Host IP address for each Class C network. Please refer to www.computernetworkingnotes.com/networking-tutorials/ip-address-classes-explained-with-examples.html for these details.
Assuming you figured it out by now, this was confusing tf out of me, but basically in each octet for each class you can't use the first bit, so that divides the networks capacity by 2
RDP port "3389" is blocking to connect windows desktop machine. Changed firewall settings from laptop, but still the problem is occurring. Please advice me
@DiThank you for the course. But I have a question. I pasted the public IP of my EC2 instance on a web browser and it showed an error although I have set my inbound rules to all traffic. Can you tell me why?
Stuck on your cloud computing certification journey? Don't struggle alone! Whether you're just starting out or aiming for your first cloud computing job, we're here to help you ace those certification exams. Ditch the overwhelming course overload and streamline your preparation with our one-stop resource. th-cam.com/video/4D3ihaeS9uY/w-d-xo.html
Imagine that: You can run a company’s entire IT infrastructure without physically setting up any traditional thick client hardware. The days of thin clients are back where each employee is assigned a physical thin client “computer” that remotes into their own “physical” station. Basically the only thing that needs to maintain is a super reliable Internet connection where the entire office uses to connect to AWS. Basically if you are in your 20s or 30s, and plan to work in IT support for the next 40 years, you either have to learn about networking, AWS (or equivalent), programming, database, or web design. Being an expert in anything else won’t get you a rewarding job in IT.
For anybody using this in 2024, when you launch your EC2 instances at 41:05 , you must set --metadata-options HttpTokens=optional as EC2 now defaults to using IMDSv2, which will break the user-data script as it uses IMDSv1 to get the metadata.
Man thanks for saving my day
This worked to an extent - it gives me 'This instance is in the subnet wih ID:' but not actually filling out the subnet id - do you know why. My metadata options are definitely what you said here.. thanks :)
I have paid for multiple courses and your free content is 100× better and more clear! Thank you so much I subbed to this guys personal channel he deserves way more.
Hey Neal, I'm completely blown away by this course, the high level of quality you delivered on it. Thanks you so much
I agreed. The content and presentation are top notch. Thanks a lot.
What a very useful video! It unravels any confusion around vpc and a lot of stuff going on around it. But it's indeed a heavy topic tho.
1:36:24 actually if you want to delete bucket policy without login as root or deleting your bucket, you can do:
aws s3api delete-bucket-policy --bucket
The explanation of IP address classes conflates private addresses and classes. The addressable range given is much bigger than you say - it's just that the private network within the range has those limits. It'd be clearer to give the full range, and if you need an example, don't choose the private range as your example network.
Salute to Neal. His vids helped me passed the SAA-C02 last March 2021. 🐳🎉🎉
Congrats
Well done ! What else did you use to study?
@@zimcanit6647 i also took the SAA-C02 course from ACloudGuru. Both ACloud’s and Neal’s are close to the actual AWS exam. Wishing you all the best if you’re planning to take the certification 🎉
Can you tell me how this certification helped you... It's been 1.5 years... What are you doing these days? I am also planning to take this certificate.
@@sarwarmehdi714 Hello. This course from Neal helped me a lot not only just to pass the exam but for my day to day work as an AWS Consultant.
The best practices on the course helped me design a well architected and cost effective cloud solution. After I passed the exam, career opportunities opened up and it boosted my career and overall market value.
I highly recommend Neal’s course and any AWS related courses that you think will help you to ace the exam cause reward out there is very generous it may not be on your current employment but generally in the tech space.
To date, I am a Blockchain developer now and still working on some cloud projects from time to time whenever the opportunity permits. Best of luck to you and hope you share your journey here soon 🙇♂️
just want to say thanks for this content! I've watch and learn VPC too many times for now from a different course, but your content finally made me understood the big picture. I really like the diagram, it help me understand how everything is connected.
so many paid courses on this topic, yet it is that one freely available video on TH-cam that clears all our doubts. Thank you so much for such a great lesson.
I have done the AWS certification course by Neal, and it was really good! The format of first theory then lab, and the well thought-out examples are very very useful!
bro I'm preparing for solution architect associate exam what tips can you give me?
I am only 18 mins into the video and i am already feeling like a PRO. Thank you for breaking this down in a clear language.
Being delusional is no good
My English is not advanced, but I managed to absorb all the content without any problems, excellent content, congratulations.
I thanks Neil, from the bottom of my heart for providing this content for free & also putting some much effort in explanation & visualization for easy understanding, may god bless you with good fortune.
After studying this lesson I got your course to prepare for the AWS Arc prof. you are a create teacher with values insides.
Fantastic course. Thank you for putting together this high quality and clear material on such a complex and detailed topic.
If I may suggest a small addition you might consider: it would be wonderful to have an end section with a glossary, and perhaps a high level summary (review) of the course.
- VPNs because of using the public internet are subject to it's bandwidth constraints and latency issues that arise
- DX is a private connection into AWS - not shared, not public
- In the DX location, AWS has an AWS cage - rack where they have their own equipment. Then there's the Customer or Partners cage - your rack with own equipment or rented from a partner
- Both of these cages will have a router - AWS DX router and Customer DX router, respectively
Neal, Thank you so much for this incredible video 👍
Question: Could youkindly share the link to the subnetting calculator you mentioned at 25:48 please? Thank you
At this point college should just handout degrees for some money as this content is more learnable than lectures itself!
Uni courses are always outdated and they just give us foundation
im in my lecture now and just had to turn it off and watch this
At the 42 minute mark what cli was he using to spin up that instance? i know he was using the amazon cli but was he using a different virtual machine entirely and he ssh into in or a aws ec2 instance and he ssh into that and ran those aws cli commands?
At the 25:22 mark you begin to talk about a tool for helping with CIDR block creation. Can you provide a link to that tool?
If you look at the RFC 1918 range, why would an EC2 instance deployed simply to host a web app require so many addresses? (I know its the technical limit but my question is the practical need for such a huge range)
Isn't just one adress for the machine itself enough? Or this taking into consideration that tomorrow there could be hundreds of docker containers that require their own network address? Can anyone throw some light on this?
Neal you are the finest. i really like the way you teach. i have viewed other mentors too but they are not good as You.
Great content and so smooth with his delivery. I do have a question. At timestamp: 40:37 how do we change to our amazon vpc directory? I have tried and tried to get there but i am stuck. Help! lol
Did anybody work this out? because i'm sat headbutting my desk....
@@nathanroche7722 he is using the aws cli through his terminal. just cd'd into that directory.
Great course Neal, I like how you explain everything, clearly, with illustrations and hands-on examples. Thanks for sharing!
I've learned a lot with Neal's easy explanations and hands-on labs. Not bored too :)
what happen to Neal Davis's other course AWS for Begginners ? Looks like it was taken down today...I was halfway through the course.
Hey neal, you told earlier in this video that the network acl are applied to subnet level, and SG are applied to EC2/instance level, we got it, but here you are applying the Network ACL to VPC, its working , can you give some justifcation. And great video!!!
I'd pay to be taught Neal. extremely high quality on the delivery
Hello Neal, this is a gold mine of VPC.
That's all I have to say. 💯
Wow, such an amazing explanation of AWS VPS, simply another level. Thank you Neal.
Look at the top of page 3 of RFC 1918. Has that been overridden by a more recent RFC?
IOW 192.168 is /16
could you explain briefly about the CIDR you mentioned at 12:00 minute? i m unable to grasp it
Thank you so much for this video. I had some doubts regarding the VPC and it's pretty much clear watching this video. Thank you!!
Has anyone got the link to the IPv4 Subnet creator tool Neal talked about at 0:25:33 of the training please?
This is an absolute delight. I had the pleasure of reading something similar, and it was an absolute delight. "Mastering AWS: A Software Engineers Guide" by Nathan Vale
After deleting the NAT gateway. when I went for deleting Elastic IP, the only option I have is to release it?
Would releasing the Elastic IP be same as deleting it? I don't want to incur any charges. Thanks.
Yeah
In the private IP address range, you have mentioned 172.32.x.x which is actually a public address routable over the internet. Please confirm whether any recent changes come in Private and public IP address ranges?
Awesome Sir, it will be great if a free certificate of completion can be added and included with all these courses and it will be very very helpful for many people's like me who can't afford paid Vendor Certifications
If the vpc is priv, then why did you set an igw to it therefore making it accessible from the internet?
Can you tell that what are the certification should we do as a web and java developer
I was spending money on Udemy, no longer, signed up for the monthly program!
Thank you so much! Please how can we get access to the website you used to calculate the subnets?
Such a clear way of teaching he has. I enjoyed this course very much. Thank you so much Neal.
what are the other ways VPCs communicate with each other if not VPC peering ? Say I have a application VPC and DB VPC , how can i essentially make them communicate ?
My exam is in two days (19th OCT 2021). The timing couldn't have been better.
hello how was your exam?
@@sophiaugiagbe1776 passed, thank you. Are you also taking up the exam?
great lecture. one question though. whats the link for the tool @26:08
The switching back and forth between production and neal account, how to do it? sorry got lost on this part, I am a begineer. Any suggestion or help on what document to look for. I tried to search and found Switch Role but i think it is to assume role for instances :D
This maybe late, but I use incognito mode to use another account at the same time. I think some plug-ins or chrome's PROFILE option can also be used.
I am impressed with you teaching and presentation skills. Well done.
Everything is superb, but speed of the explanation can be reduced a bit as it would be harder for beginner to grasp where things are getting connected or peered etc
small update
Class C private address range is
192.168. 0.0 to 192.168. 255.255
Thanks Neal. Will be watching this often. Hard stuff. Difficult to determine what to actually do in our microservice env.
Thank you for this detailed tutorial on AWS VPC.
What's the guidelines and best practices between choosing VPC peering vs site-to-site VPN?
@55:30 for inbound and outbound rules, we are allowing all traffic both directions... When these rules are evaluated in order what is the point in even adding deny rules? Can someone please clarify.. Thanks
DENY all rule is there by default, when you create the NACL. That rule can't be deleted.
what tool was used for the network diagrams?
Thanks, high quality and tempo is great.
I really like your accent and clear presentation!
Where can I get the IP addressing tool for subnets?
Thanks
However subnet calculator link is not provided
23:19 bigger CIDR blocks are better. Can you define what a big CIDR block is?
/16
How do you locate the Amzon VPC directory to enable you copy the file name?
Did u find the attachment...file name
Crazy, I just came off a 3 hour session of trying to figure out VPC
This Mr Neal seems to know what he is talking about 👍
Unable to connect to instance in private subnet from browser as well as using ec2 connect, also when I connect to instances in public they are working fine but not displaying subnet name , what could be the problem, ?
As I started watching I really enjoyed :) this video. Thank you :)
Can you please share the link for Ipv4 address planner
Can someone explain why it has public access for instance sits in private subnet @ 44:15 ?
pls provide the link to use Network subnet tool
Hi I didn't understand the total network & Usable address per network can someone explain it at the 10 th minute of the video
Where is the link to the IPv4 Subnet Calculator please?
22:22 why do you need to borrow 8 bits from the network id ?
This is enlightening. I read a similar book that was a paradigm shift. "AWS Unleashed: Mastering Amazon Web Services for Software Engineers" by Harrison Quill
Much needed tutorial. Thanks as always FCC.
Are you on IIT M data science
@@bidyutbikashtalukdar8675 Nope
At 24:51 a route table is shown. How is something starting with 10 is called public subnet. My understanding so far was any IP starting with 10 is private. Can anyone help me to understand this.
What is the link to the IPv4 subnet creator tool?
@9:55 how is the total networks calculated?
Where are the links to supplementary vidoes
thanku u are helping poor people like me
I was not able to do the section because I do not have the Key Pair setup seen at 40:01 and I do not know how Neal set it up. Does anyone know how Neal set his up?
Key pair is not required parameter, as I know it used for connection to EC2 via SSH
For class A, why the total networks is 126 and not 245?
Neal always has great content.
Hi Neal - Can you explain how you get the number of networks available for a range of IPv4 addresses like CIDR, Class A, B and C? I get how you get the number of usable addresses per network.
Class A networks do not use the left most bit in the 1st octet. It's always fixed with a value of 0. Therefore the possible networks available in Class A network is 2 to the power 7 i.e., 128 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 126 valid Class A networks. Each network has 2 to the power 24 i.e., 16,777,216 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 16,777,214 valid Host IP address for each Class A network.
Class B networks do not use the left most 2 bits in the 1st octet. It's always fixed with a value of 10. Therefore the possible networks available in Class A network is 2 to the power 14 i.e., 16,384 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 16,382 valid Class B networks. Each network has 2 to the power 16 i.e., 65,536 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 65,534 valid Host IP address for each Class B network.
Class C networks do not use the left most 3 bits in the 1st octet. It's always fixed with a value of 110. Therefore the possible networks available in Class A network is 2 to the power 21 i.e., 2,097,152 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 2,097,150 valid Class C networks. Each network has 2 to the power 8 i.e., 256 - 2 (all 0s would go for the network ID and all 1s would be used for the broadcast) i.e., 254 valid Host IP address for each Class C network.
Please refer to www.computernetworkingnotes.com/networking-tutorials/ip-address-classes-explained-with-examples.html for these details.
Assuming you figured it out by now, this was confusing tf out of me, but basically in each octet for each class you can't use the first bit, so that divides the networks capacity by 2
@arturo9790 can I connect to you , to understand this part.
RDP port "3389" is blocking to connect windows desktop machine. Changed firewall settings from laptop, but still the problem is occurring. Please advice me
@DiThank you for the course. But I have a question. I pasted the public IP of my EC2 instance on a web browser and it showed an error although I have set my inbound rules to all traffic. Can you tell me why?
Thanks so much for everything Neal
Great, all we need are here. Thanks teacher
Awesome explanation..crystal clear..!!
please upload a complete video on data warehousing and data mining. please 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼 🙏🏼
Stuck on your cloud computing certification journey? Don't struggle alone!
Whether you're just starting out or aiming for your first cloud computing job, we're here to help you ace those certification exams. Ditch the overwhelming course overload and streamline your preparation with our one-stop resource.
th-cam.com/video/4D3ihaeS9uY/w-d-xo.html
Hi Neal this is helpful in my job as a reference video, What is the network tool you used in the subnetting?
wow, impressive training. really really useful
i'm locked out of my vpc i tried to do UFW enable and it locked me out of ssh, and i can't access it anymore halp
Excellent ! Loved your Content. Thanks a lot for this Video.
This is exceptional
This course is gold.
Amazing resource
Thank you so much for this amazing content.❤❤
Imagine that: You can run a company’s entire IT infrastructure without physically setting up any traditional thick client hardware. The days of thin clients are back where each employee is assigned a physical thin client “computer” that remotes into their own “physical” station. Basically the only thing that needs to maintain is a super reliable Internet connection where the entire office uses to connect to AWS.
Basically if you are in your 20s or 30s, and plan to work in IT support for the next 40 years, you either have to learn about networking, AWS (or equivalent), programming, database, or web design. Being an expert in anything else won’t get you a rewarding job in IT.
I never thought of this, I guess with 5G this would turn out to be feasible.
I was waiting for it. Thanks
Hello Neal, My I know the tool, that you're using for subnetting, Thank you so much!
Amazing session.