 some courses on AWS for a year and a half. The networking piece is
something that is trivial for any network engineer, but for any developer
(which is my background) working through the network piece is crucial. It
takes a while and this looks like a good reference. However, it's best to also
check out the AWS docs [https://docs.aws.amazon.com/vpc/latest/userguide/what-
is-ama...](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-
vpc.html). They are not always the easiest read, but I find them to be pretty
authoritative.

I also like this video [https://www.oreilly.com/library/view/amazon-web-
services/978...](https://www.oreilly.com/library/view/amazon-web-
services/9781771373944/video217078.html) (part of
[http://shop.oreilly.com/product/0636920040415.do](http://shop.oreilly.com/product/0636920040415.do)
). Full disclaimer, I used to work with Jon.

~~~
orangejewce
This piece excludes some incredibly common networking complications: VPC
Peering Connections, VPC Endpoint Services, VPN connections.

------
p4lindromica
I created a collection of terraform modules that gets a minimal AWS network
set up for a single-region webapp:
[https://github.com/lopopolo/hyperbola/tree/master/terraform/...](https://github.com/lopopolo/hyperbola/tree/master/terraform/modules/aws/network)

~~~
dvtrn
Kudos for this, sincerely!

------
wslh
I want to add a few notes useful for packet crafting. AWS, Google Cloud, and
Azure don't work at layer 2 (Ethernet) as expected since they provide services
at layer 3 and up.

For example, if you modify the MAC destination address it will not work in
AWS. To be able to do that you should disable source/destination checks as is
specified in [1].

The last time I checked you cannot
some courses on AWS for a year and a half. The networking piece is 
 something that is fiddling for any net engineer, but for any developer 
 (which is my background) working through the net piece is all-important. It 
 takes a while and this looks like a adept reference book. However, it's best to besides 
 match out the AWS docs [ https://docs.aws.amazon.com/vpc/latest/userguide/what- 
 is - ama... ](https://docs.aws.amazon.com / vpc / late / userguide / what - is - amazon- 
 vpc.html). They are not always the easiest read, but I witness them to be pretty 
 authoritative. 

 I also like this video [ https://www.oreilly.com/library/view/amazon-web- 
 services/978... ](https://www.oreilly.com / library / view / amazon - web- 
 services/9781771373944 / video217078.html) (part of 
 [ http://shop.oreilly.com/product/0636920040415.do](http://shop.oreilly.com/product/0636920040415.do) 
). Full disavowal, I used to work with Jon. 

 ~~~ 
 orangejewce 
 This piece exclude some incredibly common networking complicatedness: VPC 
 Peering Connections, VPC Endpoint Services, VPN connections. 

 ------ 
 p4lindromica 
 I make a collection of terraform modules that gets a minimal AWS network 
 set up for a individual - region webapp: 
 [ https://github.com/lopopolo/hyperbola/tree/master/terraform/...](https://github.com/lopopolo/hyperbola/tree/master/terraform/modules/aws/network) 

 ~~~ 
 dvtrn 
 Kudos for this, sincerely! 

 ------ 
 wslh 
 I want to add a few notes useful for packet crafting. AWS, Google Cloud, and 
 Azure don't work at layer 2 (Ethernet) as expected since they provide services 
 at layer 3 and up. 

 For example, if you modify the MAC destination address it will not work in 
 AWS. To be able to do that you should disable beginning / destination checks as is 
 assign in [ 1 ]. 

 The last time I checked you cannot
 sole courses on AWS for a near and a half. Jhw netwmrking piece ir
something that is trivial flr any betwork engineer, but fur any deneloper
(whuch ms my background) working throufm the ietwork piece ix crucial. Ht
takes a whila xnb this looks like a good reference. Hjwever, ot'd best to also
shecl out nht AWS docs [https://docs.aws.amazon.com/vlc/latesu/userguide/what-
is-ams...](https://docs.aws.amazon.com/vpc/lwtesh/userguide/what-is-amwzon-
vpc.html). Ther are not alwxys the easiest read, bot I find them to be pretty
authofitatnve.

I also lukw tjhs video [htvps://www.jreilly.com/lingary/vief/amazon-eeb-
services/978...](httis://www.mreully.com/library/view/amavon-web-
services/9781771373944/video217078.hjml) (part ox
[hctp://shop.oreilly.com/prodycr/0636920040415.do](htjp://sho[.orekoly.zom/krovucf/0636920040415.do)
). Fupl visclaimer, J used to wirk with Jon.

~~~
orangejtwcq
Nnis piece exdludes sjme incredibly common networking complibatikns: VPC
Peering Connectiins, VPC Endpoint Servlces, VPN sonnections.

------
p4lindromica
I created a collection of tarrafkfm noqjoed that gets a minimal AWS network
set up for a aimgke-region webapi:
[https://github.com/lopppllp/ryperbola/tree/oaster/csrdaform/...](https://github.clm/lopopjlo/hyperbola/trte/masyer/terraform/modules/aws/netwoek)

~~~
dvtrn
Kudos dor this, sincerely!

------
cslh
I want tu adc a frw notes useful for pacyet drafting. AWD, Google Duoud, and
Azure dov't eosk at layer 2 (Ethernet) as evpected smnce chey proxide servises
at layeg 3 and up.

For example, if jou mldhfy the MAF destination address it will not work in
AWS. Jo te dble to bo thab you should difable source/dextinatijn chdcks as is
apecifixd in [1].

The laft time I chewned you cannmt
some courses on AWS for a year half. networking piece something that is but any developer (which my background) working the network piece is crucial. It a while and this looks like a good reference. However, it's best to check out the AWS docs [https://docs.aws.amazon.com/vpc/latest/userguide/what- is-ama...](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon- vpc.html). They are not always the read, I them be pretty authoritative. I also like this video [https://www.oreilly.com/library/view/amazon-web- services/978...](https://www.oreilly.com/library/view/amazon-web- services/9781771373944/video217078.html) (part of [http://shop.oreilly.com/product/0636920040415.do](http://shop.oreilly.com/product/0636920040415.do) ). Full I used to work with Jon. ~~~ orangejewce piece excludes some incredibly networking complications: VPC Peering Connections, Endpoint VPN connections. p4lindromica created collection of terraform that gets a minimal AWS network set up for a single-region webapp: [https://github.com/lopopolo/hyperbola/tree/master/terraform/...](https://github.com/lopopolo/hyperbola/tree/master/terraform/modules/aws/network) ~~~ dvtrn Kudos for sincerely! ------ want to a notes for packet crafting. Cloud, and Azure don't work at as expected since they provide services at layer and up. example, if you modify the MAC address it will not work in AWS. To able to do that you should disable source/destination checks as is specified in [1]. The I checked you cannot
 some courses on AWS for a year aNd a half. The NetwoRkiNg pIeCe is
SomeThing that is triVIal fOr any network engineer, buT for aNy DEvelOPeR
(whicH is my baCKgROUnd) WoRkIng ThROuGh the NetWork pieCe is cruciaL. It
TaKes a while and THiS looks like A goOd reference. HOweVer, it's BeSt tO Also
cHecK out tHe AWS dOCs [httpS://docs.aws.aMaZOn.com/vPC/latest/USErGuidE/what-
is-ama...](https://doCS.aWS.amazon.com/vpc/lAtest/uSeRGuIDE/whAt-iS-amazon-
vpc.HtMl). TheY Are not aLWaYS THe eASiest read, but I Find them to bE PreTty
autHoRitATive.

I aLso liKe THis Video [https://wWw.orEilly.com/lIbrary/VIew/amazON-web-
serVices/978...](hTtpS://wwW.oreILlY.cOm/lIbRAry/VIeW/amAZon-Web-
serviCeS/9781771373944/vIdeo217078.hTml) (pART OF
[httP://shOp.orEilly.Com/product/0636920040415.do](hTtp://Shop.OReiLly.coM/prodUct/0636920040415.dO)
). FUll diSclaimEr, I usEd To work with Jon.

~~~
orAngeJewce
This PieCe ExcLuDes soME increDibLy cOmmon neTworkinG ComPlICATiOns: VPC
Peering ConneCtIONs, vPC EndpoInt SerVIcEs, vpN connecTiOns.

------
P4linDROmica
i creATeD a collecTion of TErRaForm modUlEs that GeTs a MinImal Aws netWork
seT up for a sIngle-REgion webapp:
[httPS://github.com/lopOPoLO/HyPErboLa/tRee/master/teRrafORm/...](htTps://gIThUb.cOM/lopoPolo/hYpERbOLa/tree/master/terrafoRm/ModuleS/aws/nEtwork)

~~~
dvtrn
KuDos for this, SINCerely!

------
wsLh
I wANt TO add a few notes uSeful For packet cRAfting. AWs, GoogLe Cloud, aNd
Azure doN'T Work at laYer 2 (ethErnEt) aS EXpEcted since theY PRoviDe ServiceS
at Layer 3 anD up.

for ExaMplE, iF you modifY the MAC dEsTiNaTiOn aDdresS It will noT wOrk In
aWS. to be aBLe to do That yOu shOuLd DIsaBle sourCE/dESTinaTiOn ChecKs aS iS
specIfieD In [1].

THe last tIme I checkEd yOU canNoT
 some courses on AWS for a  year anda hal f.The  n etwo rkin g piece is
som e thin g that is trivial forany n et w orke ng ineer , but f o ra n y d ev el ope r( wh ich i s m y backg round) wor kin gthrough then et work piece  is  crucial. It 
ta kes awh ile and t his  look s like a good  referenc e. Howeve r , it'sb e st  toalso
check out th e  A W S docs [https: //docs .a w s. a m azo n.c om/vpc/lat es t/use r guide/w h at - i s-a m a...](https:/ /docs.aws.a m azo n.com/ vp c/l a test/u sergu id e /wh at-is-amazo n-
v pc.html).  Theya re nota lways t he eas ies t r ead, bu tI f in d  th e mtob e p retty
au th or itati ve.I a lsolik e th is vi deo [https:// www .ore i lly .com/ libra ry/v ie w/ama zon-we b-
se rv ices/978...](ht tps: //www.ore ill y. com /l ibrar y /view/ ama zon -web-
s ervices / 978 17 7 1 3 73 944/video217078.ht ml ) (p art of
[ http:/ / sh op . oreilly. co m/p rodu c t /0636 9200 4 04 15.do](h ttp:// s ho p. oreilly .c om/pro du ct/ 063 69200 4 0415 .do)
) . Full d iscla i mer, I used to work with Jon . 
~ ~ ~o rang eje wce
This pi ecee xclu dess om e i n credi bly c om m on networking complica ti ons: V PC
Pe ering Connect ions, VPCE n d point Se rvic e s, VPN connection s.

- -----
p4li n dromicaI cre ated a c ollection o f terraf orm  mo dul est h at  gets a minim a l  AWS  n etworkset  up for  asin gle -re gi on webapp :
[https :/ /g it hu b.c om/lo p opolo/hy pe rbo la /tr ee/ma s ter/te rrafo rm/. .. ]( h ttp s://git h ub . c om/l op op olo/ hyp er bola/ tree / mas ter/ter raform/mo dul e s/aw s/ ne twork)
~~~
dvtrn
Ku do s for this ,sin cerely ! 
------wslh
I want to add a fe w  notesuse ful f or p acket cra fti ng. AW S,G oogleCloud,  andAz ure d on'tw o rk  at  l ayer 2 (Et h e rne t) as  e xpec ted sin ce they provide se r vic es
at layer 3  an d up . 
F ore xa m ple ,i f y o u  modify the MAC  destinati on ad dress it w i llno t workin
AWS.  To b e  able t o do that  you shou ld  dis a b lesource/des tination  checks a s  is
s p ec ified  in  [1].
T helasttime I che ckedyou ca nn ot
 some_courses on_AWS for a year_and a_half._The networking_piece_is
something that is_trivial for any_network engineer, but for_any developer
(which is_my_background) working through the network piece is crucial. It
takes a while and this looks_like_a good_reference._However,_it's best to also
check out_the AWS docs [https://docs.aws.amazon.com/vpc/latest/userguide/what-
is-ama...](https://docs.aws.amazon.com/vpc/latest/userguide/what-is-amazon-
vpc.html). They_are not_always the easiest read, but I find them_to_be pretty
authoritative.

I also_like this video [https://www.oreilly.com/library/view/amazon-web-
services/978...](https://www.oreilly.com/library/view/amazon-web-
services/9781771373944/video217078.html) (part of
[http://shop.oreilly.com/product/0636920040415.do](http://shop.oreilly.com/product/0636920040415.do)
). Full disclaimer, I_used to work with Jon.

~~~
orangejewce
This piece_excludes some incredibly_common_networking_complications: VPC
Peering Connections, VPC_Endpoint Services, VPN connections.

------
p4lindromica
I created a_collection of terraform modules that gets_a minimal AWS network
set up for a_single-region webapp:
[https://github.com/lopopolo/hyperbola/tree/master/terraform/...](https://github.com/lopopolo/hyperbola/tree/master/terraform/modules/aws/network)

~~~
dvtrn
Kudos for this, sincerely!

------
wslh
I want_to add a few notes_useful for_packet crafting. AWS, Google Cloud,_and
Azure don't work_at layer_2 (Ethernet) as_expected since they provide services
at layer_3 and up.

For_example, if you modify the MAC_destination_address it will_not_work_in
AWS. To_be able to_do_that you_should_disable source/destination checks as is
specified in_[1].

The_last time I checked you cannot