networking
Published entries in this category.
-
ACM public vs Private CA for intranet TLS
Side-by-side ACM public HTTPS on an internet ALB and AWS Private CA on an internal ALB, with Linux trust installed via S3 and SSM.
-
NTRIP caster HA patterns
BKG’s caster fans GNSS streams but won’t fail over. Prove a normal relay-IPort first, then bolt on dual-AZ L4 and multi-region DNS — one stack at a time.
-
AWS NFW Walkthrough
Stand up disposable TGW hubs in Sydney and Auckland, then prove Network Firewall really double-inspects cross-Region traffic.
-
TGW Policy-Based Routing
Same private IP, two paths — prove Transit Gateway Policy-Based Routing sends HTTPS via the hub while HTTP goes direct.
-
PrivateLink vs inspected TGW
One live stream, two paths — clock PrivateLink against a TGW inspection hairpin, then keep the path that wins on latency and cost.
-
PrivateLink path between producer and consumer VPCs
Cross-account PrivateLink into a private 3-tier API — same-Region Sydney, cross-Region Melbourne, and why New Zealand cannot join the cross-Region path today.
-
AWS private connectivity patterns
Deploy and compare five private cross-account patterns — VPC Peering, PrivateLink, VPC Lattice, Transit Gateway, and Cloud WAN.
-
AWS–GCP Interconnect
Private connectivity between AWS and GCP — no VPN, no colocation, no public internet.
-
VPC IPAM multi-account
Org-wide VPC IPAM across four accounts and two regions — delegated admin, RAM pool sharing, and pool-backed workload VPCs.
-
VPC Lattice at AWS Community Day Aotearoa 2025
Talk resources for modern service networking with VPC Lattice — agenda, links, and a Terraform example.