Hello and welcome.
So last lecture about the VPC theoretical part and this is the direct connect basically and the high
performance low latency high bandwidth connection.
That is not Internet based between your VBC and E.W. us and your on premise headquarter branch offices
or data centers basically or remote location that you need to connect your viewers.
OK.
So how does that look like.
So here is your the PC and here is your remote location on the customer network or the on premise site
that you would like to connect to your PC and you don't want.
You are not interested in going over the Internet so the VPN connection here is not what you are targeting
you are targeting.
On the other hand a higher speed higher bandwidth less latency and higher performance connection.
And of course the Internet can give you that cannot guarantee high speed or high performance all the
time and cannot guarantee latency and hence its not the expected performance that you need.
Why would you need that connection you could have.
You may have a lot of traffic that you would like to exchange between your network and your VBC and
it could be also that you are running some applications that are time sensitive.
Basically they are not.
They cannot tolerate the fluctuating latencies and light and jitters and all that on the Internet.
But of course nothing nothing is for free on the Internet.
Its quick to deploy it is cost effective but there are no guarantees on the performance on that day
connect it takes more time there is a lead time to submit requests to submit requests to the partner
providers that support that connect connection in order to lay down the connections to your premises
and on the other side as we see now connected in the connect locations of AWOS and that to be mapped
then to your VTC it takes time.
So to hire performance and all that but if you have an immediate need you would like to do some testing.
And you cannot wait then definitely VPN is the way to go because you don't have any other option.
Or if you can your product can wait for a few weeks or few months even sometimes then be it.
That would be the direction that we need to understand some new thing called E.W. direct connect location
here.
So what is it a mistake.
Good question.
Basically lets say in the U.S. I mean you have Equinix you have AT&T you have horizon and you have other
companies that can provide you sort of wide area network links so basically and to connect something
in Dallas to something in lets say Austin in Texas or New York then thats a long distance connection
we call it wide area network connection.
Now some of these providers have been choosing or have gone into agreement and partnership with us in
order to connect to the customer that their customers to us.
How is that possible.
There is location in between that will have provider X provider presence and its obvious presence.
And this is called direct connect location by the way that connect or the X they are the x is a symbol
or an acronym for data connect.
So I have here provider partner provider rack and it track in the same data location so I will connect
the customer router on the customer network I will connect connected to a customer out a provision by
either by the customer or by the provider the partner provider Equinix or similar.
So this could be a customer the customer can have a track here and then he gets the connection from
the provider and the customer can own these two routers or they can be outsourced or least from the
partner provider.
So once they have this connection is that all.
No I still need to connect to it as it is on the tracks.
They will have what we call they connect routers like connect equipment.
These data connect equipment are connected to back home to the different various regions all the different
it is a very it is on in the region anyway they are connected to you of your environment from the outside.
Now how can I connect this one with that one.
This is AWOS responsibility this is the provide the responsibility and then either just works with the
partner or with your daughter in order to cross-connect this route or this.
So now the connection is complete from the customer out here all the way to the virtual gateway.
I have this connection after I have this connection.
What do I do.
So this connection has to use something called sub interfaces.
Those of you who are from MIT and from networking background probably they will understand what they
mean but what are some interface.
So basically if I have this connection now and then coming through the data connection and all the way
to the VZW so I have this pipe and that pipe could be one gig could be a hundred million it could be
10 gig.
So basically it supports 1 gig and 10 gig.
But on that you can have four speeds starting from 50 megabits per second hundred megabits per second
and onwards.
How can I use that how can I can figure that we use something called sub interfaces or basically channels
on the pipe that you have.
And this is supported via something called to do that one.
Basically I split that to sub interfaces or villans what is a villain a villain is really when you send
your packet or your frame you will have an identifier from the packet as it goes out from here and it
passes through this hardware in order to ensure that it is received on the right channel here and this
channel or this villain and that will and they are completely isolated from each other and they will
have different IP addressing as well.
And this is going all the way so that they are three IP addresses will be here and here.
Now can I do a little to switching over this connection.
The answer is no because there has to be an IP address here.
There has to be an IP address here and you have to configure BGP routing.
On top of them.
Why.
Because the user needs to talk about to send few subnets from the site across.
And also the customer router needs to send some routes from here that they will exchange traffic with
two instances or it services.
So this has to be transmitted this way.
This has to be transmitted that way.
This is how the reader knows about the remote and this is how the customer router knows about the VPC
site.
They now have multiple types of these interfaces.
These are by the way are called virtual interface or VI of yes you have two types you have public the
highest and you have private the idea of what what they use public word or use or when doing with public
windows private.
If your intent is from here to try to reach to public services like what like S3 storage like glacier
archiving if you want to get to the public services you have to use the green one here represents a
public the IAF and this is villaine number two if you want to reach your VBC and VBC subnets then you
go through a private VHF and this is the last one.
What's the difference here on the public.
You need to use public Internet through double IP addresses in this one you can use private IP addresses
and usually it will allocate the private ones from the one 16:9 one 2:54 that X that x range to interface
will tell you use this one.
Why.
Because they are also having that connect with other customers and they want to make sure that they
don't confuse sending your traffic to another one because you have an overlapping 169 IP addresses.
So that's why also it controls the IP address on the private lives on the public VISX using Internet
Protocol IP addresses ensures that there will be no conflict between you and another customer because
the Internet addresses cannot be duplicated.
Right.
That connect is a high performance low latency connection.
VHF is nothing more than an 82 that one Cuvee land or basically a channel or something interference
on the link.
You need to have one private wires to connect to your PC and private subnet and we need the public VHF
to connect to it as public services.
You cannot do layer to over your data collection has to be there three and you have to use BGP.
There is no choice there.
And as in the VPN if I have here in that instance or that gateway in my public subnet not the private
subnet.
So they go through my I efforts through the internet gateway and then outside to the Internet.
And the answer is no you cannot do that.
High availability with directly availability of that connect.
Basically what you can do is you can have one or more customer routers and then you can connect to multiple
direct connections.
They could be even through different provider partners or Equinix and AT&T and then you connect to that
they will connect you through different instances on your PC side case.
That's how you achieve that and through BGP you can do active active so both connections can be active
at the same time.
Or you can do active passive.
So basically one will be active the other one will not be active.
And here's one example for that.
So here I have two customer routers to dial connect connections.
I can have them to two different direct connect locations and then they connect all their back all to
that virtual private gateway.
Of course this is again as I said I can do active active or active backup active standby.
But this is an expensive redundancy.
You can use it in case if you cannot afford if one connection fails you cannot afford to downgrade the
performance or increase the latency on the connection.
And that's why you go there to connect both ways.
So to customers out there so that Internet connections and to connect locations and maybe we should
be routing.
OK.
So here we have another example of redundancy or fault tolerance.
And in this case I have a high speed connection that connects the alternative or the backup.
The connection will be VPN.
So that's a lower performance more latency.
In this case.
So I can still have two customer routers here.
I have two connections.
One is I connect the other one is VPN.
But of course the performance will not be the same.
And the VPN definitely will not be used as active active.
This will be the backup connection in my case.
And of course VPN is a cheaper backup connection.
One thing to note about that connect is once you have that connection to the region to have peace in
the region do you have access to one of these on to the citizens.
Are all of them you have access to all the Easy's in the region.
And you can establish if you want to connect to remote regions you can establish IP SEC since this one
has access to all the ICT that it has public IP addresses and public ranges.
You can establish an IP connection to the VZW in remote regions over the public VHF and that's how we
can even connect to your remote regions through the that connect.
This is not related to that specifically but this is generally speaking in one routing table I can have
only one default route.
So they can have only one entry that points to 0 0 0 0 and this has to go either due to AGW to your
VZW or to your peering connection very busy peering connection.
But you cannot have more than one.
Remember that propagation can be the alternative for the VZW to exchange routes with your routing table
and that's it.
So in the next lecture we'll start looking at the scenary questions and we'll have more fun applying.
But we have learned through the theoretical lectures I know it might have been lengthy ones but I hope
also that it was detailed enough and it made the point and the purpose by ensuring that the PC is very
very clear.
Now security groups network ACLC routing tables VZW is AGW VPN.
All that is very clear and you don't have any ambiguity or concerns answering any question or any scenario
and then we'll apply that also to the questions and hopefully by the end you have mastered and you can
ask any related question in the exam.
So I'll see you in the next lecture.