Hopefully you would have read the Introduction to what I’m trying to achieve here, if not head over to here first before continuing The World of AWS! | Introduction
Getting the Ones and Zeros in place…
Before we can get to deploying instances and running websites we first need to make sure we have our networking planned and setup. There’s a couple of things here we need to do:
- Get our top level IP CIDR range
- Get our plan on paper, or Draw.io for me
- Run through where ranges we’re going to be using for our different subnets
- Run through which availability zone (AZ) will be used for which subnet
Lets start at the top. Our top level CIDR range can be anything to us as its all made up but if you doing this in a slightly serious way you maybe given a range. For me I’m just going to choose the following:
192.168.0.0/16
This should give us plenty of ranges to slice up for whatever we need it for. If you get stuck here and aren’t sure, think of it as an address range you can carve up into smaller ranges. An online subnet calculator can also help.
Next on the list is getting our layout drawn out. This step isn’t mandatory but i find it so much easier to picture and reference back to if its drawn out. I’ve made the following assignments:
This shows that i have a VPC (Virtual Private Cloud) called MAIN-VPC-01 with the top level CIDR address of 192.168.0.0/16. Within that new VPC i have 4 subnets spread over 2 availability zones (AZ). Two of the subnets will be used for public access and two for private only. These subnets will be where our deployed resources will leave.
192.168.5 and .10 will be used for public access in AZ A and B.
192.168.1 and .2 will be used for private access in AZ A and B.
The idea here is that we will eventually have 2 web servers which can be accessed anywhere in the world. These 2 web servers will then be able to communicate to database or file servers residing in the private subnet. The private servers will not be accessible to anyone on the internet only the web servers.
How i did it…
- Start by entering VPC into the search navigation at the top of the page
- Select Your VPCs on the left hand menu
- Select Create VPC
- Enter our details which we assigned earlier on and click Create VPC once finished
- We now have our VPC we can start to look at creating our subnets. Back on the VPC service page select Subnets on the left hand menu
- Select Create Subnet
- Populate the fields with our data
- Selecting create subnet at the bottom of the page. I’ll do this for the rest of our Subnets
That should be it for networking for the time being. We’ll next start looking at deploying our Internet Gateway and any corresponding Security which will need configuring to start adding layers of security to our startup.
Onto the next! The World of AWS | Getting Connected with Internet Gateways
