Network Choices
AWS Network Services
Virtual Private Cloud (VPC)
- allows for the creation of a private network within the AWS cloud.
Direct Connect
- allows for a dedicated connection between on-premises infrastructure and the AWS cloud.
Route 53
- a highly available and scalable Domain Name System (DNS) service.
Amazon CloudFront
- a content delivery network (CDN) that securely delivers data, videos, applications, and APIs to customers globally.
AWS Transit Gateway
- enables customers to connect VPCs and on-premises networks to a single gateway.
AWS App Mesh
- a service mesh that makes it easy to monitor and control microservices.
AWS PrivateLink
- enables customers to access services over an Amazon VPC endpoint, rather than over the Internet.
Amazon VPC Peering
AWS Direct Connect Gateway
AWS Global Accelerator
AWS Doc Resources
- Amazon Lightsail
- AWS Local Zones
- AWS Outposts
- Amazon EC2 Image Builder
- AWS ParallelCluster
- AWS Firewall Manager
- AWS Shield
- AWS WAF
- Amazon API Gateway
- AWS Cloud Map
- Amazon CloudFront
- AWS Direct Connect
- Elastic Load Balancing
- AWS Global Accelerator
- AWS Private 5G
- Amazon Route 53
- AWS Verified Access
- Amazon VPC
- AWS VPN
Azure Network Services
- Azure Virtual Network (VNet)
- Azure ExpressRoute
- Azure Load Balancer
- Azure Application Gateway
- Azure Firewall
- Azure VPN Gateway
- Azure DNS
- Azure Traffic Manager
- Azure ExpressRoute Circuit
- Azure Network Watcher
GCP Network Services
- Google Cloud Virtual Private Network (VPN)
- Google Cloud Interconnect
- Google Cloud Load Balancing
- Google Cloud CDN (Content Delivery Network)
- Google Cloud DNS
- Google Cloud Armor
- Google Cloud Traffic Director
- Google Cloud Router
- Google Cloud TCP/SSL Proxy
- Cloud NAT (Network Address Translation)
Non-managed Network
BGP (Border Gateway Protocol) routers:
- used to route internet traffic between networks.
DNS (Domain Name System) servers:
- used to map domain names to IP addresses.
Load balancers:
- used to distribute incoming traffic across multiple servers.
Firewalls:
- used to secure networks by blocking unauthorized access.
WAF (Web Application Firewall):
- used to protect web applications from common threats such as SQL injection and cross-site scripting.
DDoS (Distributed Denial of Service) protection:
- used to prevent DDoS attacks from overwhelming a network or service.
SD-WAN (Software-Defined Wide Area Network):
- used to optimize and secure WAN connections.
Network Monitoring and Analytics tools:
- used to gain insights into network performance and troubleshoot issues.
Content Delivery Networks (CDN):
- used to distribute the content to end-users from a location that is geographically closer to them.
VPN (Virtual Private Network):
- used to securely connect remote offices and employees to a company's network.
Proxies:
- used to control access to network resources and to cache frequently requested content.
Switching and routing devices:
- used to forward and filter network traffic.
Network Address Translation (NAT):
- used to allow a single device, such as a router, to act as an agent between the Internet and a local network.
Quality of Service (QoS):
- used to prioritize and manage network traffic.
IDS/IPS (Intrusion Detection and Prevention System):
- used to detect and prevent unauthorized access to a network.
Network Segmentation:
- used to isolate different parts of a network for security and performance reasons.
Cloud-based security services:
- used to provide additional security features such as threat intelligence and protection against DDoS attacks.
Network Automation Tools:
- used to automate repetitive tasks and improve the efficiency of network operations.
Multilayer Switching:
- used to improve the performance and security of network traffic.
Network Access Control (NAC):
- used to control access to a network based on user credentials and device security posture.