KINX와 함께 하는 AWS Direct Connect 도입 - 남시우 매니저, KINX :: AWS Summit Seoul 2019
1 like1,593 views
The document discusses AWS Direct Connect, a service that facilitates private network connections between on-premise infrastructure, cloud environments, and various AWS services. It highlights the importance of interconnecting distributed IT infrastructure to improve network latency and reduce costs, along with supporting hybrid and multi-cloud architectures. Key features include BGP configuration, bandwidth support, and a managed service for network design between on-premise and AWS environments.
More Related Content
Similar to KINX와 함께 하는 AWS Direct Connect 도입 - 남시우 매니저, KINX :: AWS Summit Seoul 2019 (7)
More from Amazon Web Services Korea (20)
![[D3T1S01] Gen AI를 위한 Amazon Aurora 활용 사례 방법](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s01genaiamazonaurora-240702042912-516e67f4-thumbnail.jpg?width=560&fit=bounds)
![[D3T1S06] Neptune Analytics with Vector Similarity Search](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s06neptuneanalyticsvectorsilimliaritysearch-240702042912-94c41309-thumbnail.jpg?width=560&fit=bounds)
![[D3T1S03] Amazon DynamoDB design puzzlers](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s03amazondynamodbdesignpuzzlers-240702042912-ad6df881-thumbnail.jpg?width=560&fit=bounds)
![[D3T1S04] Aurora PostgreSQL performance monitoring and troubleshooting by use...](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s04aurorapostgresqlperformancemonitoringandtroubleshooting-240702042912-5df626e3-thumbnail.jpg?width=560&fit=bounds)
![[D3T1S07] AWS S3 - 클라우드 환경에서 데이터베이스 보호하기](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s07-240702042911-cb134cd6-thumbnail.jpg?width=560&fit=bounds)
![[D3T1S05] Aurora 혼합 구성 아키텍처를 사용하여 예상치 못한 트래픽 급증 대응하기](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s05aurora-240702042911-c7f3f22d-thumbnail.jpg?width=560&fit=bounds)
![[D3T1S02] Aurora Limitless Database Introduction](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s02auroralimitlessdatabaseintroduction-240702042911-cb5552b7-thumbnail.jpg?width=560&fit=bounds)
![[D3T2S01] Amazon Aurora MySQL 메이저 버전 업그레이드 및 Amazon B/G Deployments 실습](https://cdn.slidesharecdn.com/ss_thumbnails/d3t2s01amazonaurorabluegreendeployment-240702042226-3ae36566-thumbnail.jpg?width=560&fit=bounds)
![[D3T2S03] Data&AI Roadshow 2024 - Amazon DocumentDB 실습](https://cdn.slidesharecdn.com/ss_thumbnails/d3t2s03documentdbhandson-240702042224-047bbc2c-thumbnail.jpg?width=560&fit=bounds)
![[Keynote] 슬기로운 AWS 데이터베이스 선택하기 - 발표자: 강민석, Korea Database SA Manager, WWSO, A...](https://cdn.slidesharecdn.com/ss_thumbnails/d3s01aws-230704014400-3eeae447-thumbnail.jpg?width=560&fit=bounds)
KINX와 함께 하는 AWS Direct Connect 도입 - 남시우 매니저, KINX :: AWS Summit Seoul 2019
- 1. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. S U M M I T S E O U L © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS201 : AWS Direct Connect AWS Cloud VPC AWS Cloud Amazon S3 Amazon DynamoDB System Manager System Catalog VPC PrivateLink Bastion Host SSL VPN Server EC2 ELB Kinesis SSH / RDP SSL VPN 1110111011010010101110110110111101110001101010011010100011 Peering End Points 1010111011010101011101101101111011100100100011 Site to Site IPsec VPN Instances On-Premise Traditional Server AWS Direct Connect VPC Instances
- 4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS201 : AWS Direct Connect On-Premise Traditional Server AWS Direct Connect VPC Instances
- 5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. 인터커넥션 Datacenter Cabling : https://youtu.be/sN8YS1kqX2I
- 7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. 다수의 로케이션, 클라우드, 데이터를 상호 연결, 사용자와 서비스 간 네트워크 지연현상 해결 및 트래픽 현지화/비용절감 하이브리드 및 멀티클라우드 아키텍처의 활용을 위해 분산된 IT인프라와 CSP/파트너와의 상호연결 필요 온프레미스와 CSP의 연결을 통해 트래픽의 세분화 및 복잡성 해결 보안 서비스를 서로 연결하고 허브의 보안 구성을 확장하여 보안 위협 저감 데이터의 상호 연결성을 확보하여 데이터의 분석 및 통합적인 제어 가능
- 8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Equinix : Global Interconnection Index, 2018 # 디지털 트랜스포메이션 가속화에 따른 상호연결(인터커넥션) 수요 증가 # 인터커넥션은 분산되어 있는 자원과 주요 데이터를 안전하게 직접 연결하는 방식 # 인터커넥션의 지속적인 성장 예상 / 2021년, 82Tbps (CAGR 48%)
- 9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS Direct Connect를 사용하면 데이터센터, 사무실 또는 코로케이션 환경과 AWS 간에 사설 네트워크 연결을 지원합니다. AWS Direct Connect는 인터넷 기반 연결보다 네트워크 비용을 줄이고 처리양을 늘리며 일관된 환경을 제공할 수 있습니다.
- 11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. 온프레미스와 AWS 연결을 위한 인터커넥션 서비스 제공 KINX의 데이터센터 어디서나 동일한 환경의 네트워크 구성 지원 (상암, 가산, 도곡, 분당) 국내 주요 통신사의 전용회선이 모두 연결이 가능한 중립적 데이터센터 (Neutral Datacenter) KINX IDC On-Premise Traditional Server KINX MMR MEET-ME-ROOM Public Public Public Cross Connect Cross Connect
- 14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. KINX 분당센터 KINX 상암센터 KINX 도곡센터 KINX 가산센터 (Local Connection) KINX 데이터센터 他 데이터센터
- 15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. 회선 구간 ISP Bandwidth Latency 가산 ~ 가산 KINX 1G 1ms 가산 ~ 분당 KINX 1G 2ms 가산 ~ 목동 KT 50M 3ms 가산 ~ 역삼 KT 10M 3ms 가산 ~ 선릉 SK 10M 3ms 가산 ~ 송도 SK 2M 5ms 1ms 3ms 3ms 2ms 5ms
- 16. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. On-Premise Traditional Server VPC Public Cloud KINX (DX Location) VPC 고객사 랙 인터커넥션 & CloudExchange AWS DX Routers 전용회선 Customers Network Backbone Customers Router Cross Connect CSP Network AWS Cloud Customers side Partner side CSP side Instances Instances
- 17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. 고객사 랙 CSP 공간MMR (Meet Me Room) Cross-Connect Cross-Connect Cross-Connect Patch Panel Patch Panel
- 18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. BGP 구성 시 기존 네트워크 환경을 고려하여 구성 Private VIF 구성 시 연동 VPC CIDR만 수신 Public VIF 구성 시 AWS Region 내 Prefix 수신(약 2000EA) interface GigabitEthernet0/1 no ip address interface GigabitEthernet0/1.VLAN_NUMBER description "Direct Connect to your Amazon VPC or AWS Cloud" encapsulation dot1Q VLAN_NUMBER ip address YOUR_PEER_IP router bgp CUSTOMER_BGP_ASN neighbor AWS_PEER_IP remote-as 7224 neighbor AWS_PEER_IP password MD5_key network 0.0.0.0 exit ! Optionally configure Bidirectional Forwarding Detection (BFD). interface GigabitEthernet0/1.VLAN_NUMBER bfd interval 300 min_rx 300 multiplier 3 router bgp CUSTOMER_BGP_ASN neighbor AWS_PEER_IP fall-over bfd Cisco IOS feature interface-vlan vlan VLAN_NUMBER name "Direct Connect to your Amazon VPC or AWS Cloud" interface VlanVLAN_NUMBER ip address YOUR_PEER_IP/30 no shutdown interface Ethernet0/1 switchport switchport mode trunk switchport trunk allowed vlan VLAN_NUMBER no shutdown router bgp CUSTOMER_BGP_ASN address-family ipv4 unicast network 0.0.0.0 neighbor AWS_PEER_IP remote-as 7224 password 0 MD5_key address-family ipv4 unicast ! Optionally configure Bidirectional Forwarding Detection (BFD). feature bfd interface VlanVLAN_NUMBER bfd interval 300 min_rx 300 multiplier 3 router bgp CUSTOMER_BGP_ASN neighbor AWS_PEER_IP remote-as 7224 bfd Cisco NX-OS Juniper JunOS configure exclusive edit interfaces ge-0/0/1 set description "Direct Connect to your Amazon VPC or AWS Cloud" set flexible-vlan-tagging set mtu 1522 edit unit 0 set vlan-id VLAN_NUMBER set family inet mtu 1500 set family inet address YOUR_PEER_IP top edit policy-options policy-statement EXPORT-DEFAULT edit term DEFAULT set from route-filter 0.0.0.0/0 exact set then accept up edit term REJECT set then reject top set routing-options autonomous-system CUSTOMER_BGP_ASN edit protocols bgp group EBGP set type external set peer-as 7224 edit neighbor AWS_PEER_IP set local-address YOUR_PEER_IP set export EXPORT-DEFAULT set authentication-key "MD5_key" top commit check commit and-quit # Optionally configure Bidirectional Forwarding Detection (BFD). set protocols bgp group EBGP neighbor AWS_PEER_IP bfd- liveness-detection minimum-interval 300 set protocols bgp group EBGP neighbor AWS_PEER_IP bfd- liveness-detection multiplier 3 On-Premise AWS Cloud VPCBGP Amazon S3 Amazon DynamoDB Traditional Server AWS DX Routers Instances
- 19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. - 클라우드허브 콘솔을 통한 가상라우터 네트워킹 서비스 제공 - AWS DX BGP 연동 - 클라우드허브 콘솔 모니터링 및 푸시 알람 제공 - Automation 환경 지원 (Y19 Q4) - KINX 엔지니어를 통한 Full Managed Service - AWS와 On-Premise 간 네트워크 설계 지원 - AWS 및 다양한 Public Cloud의 인터커넥션 환경 제공 - Layer2 Networking
- 20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. On-Premise 인터넷(VPN백업) DX Location 전용회선 AWS Cloud VPC VPC On-Premise DX Location 40Gbps AWS Cloud VPC VPC On-Premise DX Location 전용회선 AWS Cloud VPC VPC On-Premise AWS Cloud VPC VPC DX Location KINX LGU+ 전용회선 + VPN LAG (Link Aggregation Group) 커넥션 이중화 로케이션 이중화 전용회선 전용회선 © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS DX Routers AWS DX Routers AWS DX Routers AWS DX Routers AWS DX Routers Amazon S3 Amazon DynamoDB Amazon S3 Amazon DynamoDB Amazon S3 Amazon DynamoDB Amazon S3 Amazon DynamoDB Traditional Server Traditional Server Traditional Server Traditional Server
- 21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS Direct Connect Gateway AWS Transit Gateway VPC Peering • AWS 리전에 연결되어 있는 복수의 VPC 연결 • 대역폭 제한 없음 • VPC별 BGP 세션 설정 불필요 • DX Public VIF를 통해 VPN over Public VIF로 구성 가능 (§) • 복수의 VPC 연결 • VPC을 VGW가 아닌 TGW와 연결 ( 터널당: 1.25 Gbps 지원 ) • 두 VPC 사이의 네트워크 연결 • 다른 리전 간 VPC 피어링 연결 제공 • Day2 Track5 11:10 AM – 12:00 PM • AWS Direct Connect 를 통한 하이브리드 클라우드 아키텍쳐 설계 김용우 솔루션즈 아키텍트, AWS AWS Direct Connect gateway 를 통한 글로벌 서비스 네트워크 구성 방법 • Day2 Track5 2:10 PM – 3:00 PM • AWS Transit Gateway를 통한 Multi-VPC 아키텍처 패턴 강동환 솔루션즈 아키텍트, AWS VPC간 연동을 제공하는 Transit Gateway(TGW)
- 22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. • ConnectionBpsEgress • ConnectionBpsIngress • ConnectionPpsEgress • ConnectionPpsIngress • ConnectionCRCErrorCount • ConnectionState • ConnectionLightLevelTx • ConnectionLightLevelRx 전송량 (Ingress/Egress) 링크 상태 및 오류
- 24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 26. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. User Portal AWS Consulting Partner Portal
- 27. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 28. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 29. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 30. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 31. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. User Portal AWS Consulting Partner Portal
- 32. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 33. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 34. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 35. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. On-Premise Traditional Server VPC KINX (가산) AWS Cloud KINX (분당) VPC VPCTransit VPC Account “A” Account “B” ① On-Premise와 가까운 위치인 KINX(분당)을 전용회선으로 연결 ② 분당~가산(DX Location) 간 KINX Backbone 연결 ③ DX 및 Transit VPC를 통한 다수의 리전/어카운트 연동 AWS DX Routers Instances Instances Instances
- 36. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. ① AWS ~ 중국 간 KINX CDC를 활용한 네트워크 구성 ② CDC (Active), IP Transit 국제 (Standby) ③ AWS ~ KINX 간 DX 혹은 VPN (IPsec) 이용 중국 (On-Premise) Traditional Server KINX (가산) AWS Cloud VPC Router (DX BGP) KINX Router (국제) China Direct Connect (Active) IP Transit 국제 (Standby) IP Transit 국내 AWS DX Routers Instances
- 37. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. ① DX를 이용한 단기 마이그레이션 환경 제공 ② 가상라우터(VRF)를 이용한 매니지드 서비스 제공 KINX (가산) AWS Cloud VPC 가상라우터 (VRF) 고객사 자원 (서버 / 스토리지) On-Premise 자원 이동 Instances AWS DX Routers
- 38. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. ① 지정된 사용자의 AWS Console 접속 허용 정책 수립 ② DX Public VIF 구성 (AWS IP 이용) ③ 필요 시 On-Premise ~ DX Location 간 초저속 전용회선 (TDM) 구성 가능 KINX (가산) AWS Cloud 가상라우터 (VRF) On-Premise Site-to-Site VPN AWS DX Routers
- 39. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 40. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. 1Gbps and 10Gbps 대역폭 지원 고객사가 AWS Management Console 을 통해 DX Connection 생성 50 to 500Mbps 대역폭 지원 DX Partner(KINX)가 Partner Console을 통해 DX Connection 생성 이후 고객사가 DX Connection에 대한 ‘연결수락’ 진행
- 41. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. 최대 72시간 내 승인 총 소요시간 3주~4주 2~3일 2~3일
- 42. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. [email protected]