AWS Certified Advanced Networking - Specialty Exam

N E T 2 0 7 - R Understanding the basics of IPv6 networking on AWS

Shakeel Ahmad Solutions Architect Amazon Web Services

Why IPv6

Brief overview of the IPv6 protocol

IPv6 in Amazon VPC

IPv4 to IPv6 migration patterns

IPv4: 32-bit / 4,294,967,296 addresses (~4.3 x 109)

11000000 00000000 00000010 00000001

IPv6: 128-bit / 340,282,366,920,938,463,463,374,607,431,768,211,456 addresses (~3.4 x 1038)

0010000000000001 0000110110111000 0000111011000010 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. IPv4 vs IPv6 address types

IPv4: Address types

1. Unicast 2. Broadcast 3. Multicast

IPv6: Address types

1. Unicast 2. Multicast 3. Anycast IPv4 vs IPv6 address format

IPv4: Dotted Decimal Notation + CIDR

192.168.0.1/24 127.0.0.1

IPv6: Colon-Separated Hextet Notation + CIDR

2001:0db8:0ec2:0000:0000:0000:0000:0001/64 0000:0000:0000:0000:0000:0000:0000:0001

2001:db8:ec2:0:0:0:0:1/64 0:0:0:0:0:0:0:1

VPC

Internet gateway IPv4: IPv6: Instance

Public Subnet Amazon VPC—private subnet? NAT?

VPC

Egress-only internet gateway

IPv4: IPv6: Instance X

Private subnet Amazon VPC—IPv6 routing and more . . .

VPC

Internet gateway IPv4: IPv6: Instance

VPC Public Subnet

Target Status Egress-only 2001:db8:ec2:/56 local Active internet gateway ::/0 IGW Active IPv4: IPv6: Instance X

Private subnet

• Step 1: Associate an IPv6 CIDR block to your VPC & subnets • Step 2: Update your route tables • Step 3: Update your security group rules • Step 4: Change your instance type (if required) • Step 5: Assign IPv6 to your instances • Step 6: Configure IPv6 on your instances (if required) • Step 7: Turn on IPv6 on Application Load Balancer (dual stack) Dual-stack

IPv4 IPv6 Address Address Amazon VPC—migration patterns

ipv4 Availability Zone 1 Availability Zone 2

VPC Internet gateway

Application Load Balancer DNS name: nameme-xyz.us-east-1.elb.amazonaws.com IP address type: ipv4

Auto Scaling group Instance Instance Amazon VPC—migration patterns

ipv4 Availability Zone 1 Availability Zone 2

VPC Internet gateway

Application Load Balancer DNS Name: nameme-xyz.us-east-1.elb.amazonaws.com

IP address type: dual-stack

Auto Scaling group Instance Instance

172.31.0.100/20 172.31.16.100/20 Dual-stack user/dual-stack website

DNS www.ipv6.org

194.63.248.52 (A) 2a01:5b40:0:248::52 (AAAA)

IPv4 IPv6 internet internet

• Use your own account (AWS credits available)

• Use either AWS Management Console or AWS CLI (or both)

• Ask questions as you go along

https://bit.ly/AWSIPv6Workshop Learn networking with AWS Training and Certification Resources created by the experts at AWS to help you build and validate networking skills

Free digital courses cover topics related to networking and content delivery, including Introduction to Amazon CloudFront and Introduction to Amazon VPC

Validate expertise with the AWS Certified Advanced Networking - Specialty exam

Visit aws.amazon.com/training/paths-specialty

Shakeel Ahmad [email protected]