MEPX
Chapter 6 of 10All chapters
  1. 1What the cloud is
  2. 2Service models
  3. 3Compute
  4. 4Storage and data
  5. 5Regions and zones
  6. 6Cloud networking
  7. 7Identity and access
  8. 8Cost
  9. 9Infrastructure as code
  10. 10Running things

Chapter 6 of 10

Cloud networking

Private networks and who can reach what.

The building blocks

A virtual private network holds your resources with private addresses. Subnets divide it, security groups act as per-resource firewalls, and a gateway connects to the internet.

  • Default deny inbound, then open only the ports you need.
  • Databases belong in a private subnet with no public address at all.

Getting traffic in

A load balancer terminates TLS and spreads requests. A CDN sits further out and serves cached content from near the user, which cuts both latency and egress cost.