Implementing Cloud Design Patterns for AWS(Second Edition)
上QQ阅读APP看书,第一时间看更新

Gateways

We talked earlier about how gateways allow networks to talk to each other. AWS also provides some special gateways that simplify building your solutions:

  • Internet gateway: As the name implies, the internet gateway (IGW) provides a single ingress/egress point from your VPC to the public internet. 
  • VPN gateway: A VPN gateway (VGN) gives the VPC a single route to a virtual private network. This may be back to your home data center, a partner endpoint, or any connection that requires in-transit encryption.
  • NAT gateway: The NAT gateway can be used to send all outbound traffic through a single IP address. This reduces the need for public IP addresses for your instances. It lowers the vectors of attack for malicious actors and script-kiddies alike.