Portfolio ↗

Private Connectivity

Private endpoints, peering and dedicated links to managed services.

4Questions
7Flashcards
3Terms
Drill this topic All of Networking
Questions

4 to work through

  1. intermediate

    A logistics platform must integrate with warehouse systems, carrier networks and enterprise customers over private connectivity. What determines the choice between VPN, dedicated interconnect and public endpoints with allow-listing?

    2 min answer
  2. intermediate

    A regulated client requires that no traffic between their data centre and your SaaS platform traverses the public internet. Design the connectivity and justify the cost.

    2 min answer
  3. intermediate Multiple choice

    An enterprise needs its cloud workloads to reach on-premises databases with predictable latency and without traversing the public internet. What are the options and what do they actually guarantee?

    2 min answer
  4. advanced Multiple choice

    You need to expose an internal service to a partner organisation. VPC peering or a private endpoint service? Justify.

    2 min answer
Terminology

3 terms in this topic

concept

Private Connectivity

Reaching a cloud or partner service over private address space rather than the public internet, without exposing the consumer's network in return.

 concept

Private Endpoint

A private network address inside your VPC that reaches a managed service directly, without traversing the internet or a NAT gateway.

 concept

VPN vs Dedicated Connection

Two ways to link on-premises networks to cloud — an encrypted tunnel over the internet, or a private physical circuit.
Networking

Neighbouring topics

Networking

General material on the network path underneath an architecture.

4 quiz 13 cards 14 terms

TCP/IP

Handshakes, congestion control, head-of-line blocking and connection reuse.

3 quiz 9 cards 2 terms

HTTP/1.1, HTTP/2 & HTTP/3

Multiplexing, prioritisation and the transport each is built on.

4 quiz 11 cards 5 terms

DNS

Resolution, TTL behaviour, traffic steering and failover latency.

5 quiz 7 cards 3 terms

TLS & Certificates

Encryption, integrity, authentication, termination points and expiry.

6 quiz 7 cards 5 terms

Layer 4 vs Layer 7

Connection-level versus request-level balancing, and what each unlocks.

4 quiz 10 cards 3 terms

Reverse Proxies

One place for TLS, routing, caching, compression and rate limiting.

3 quiz 9 cards 5 terms

Content Delivery Networks

Edge caching, origin offload, spike absorption and dynamic content.

8 quiz 11 cards 6 terms

Firewalls & Security Groups

Default-deny, stateful rules, and restricting egress as well as ingress.

5 quiz 8 cards 3 terms

NAT & Egress

Outbound-only connectivity, its per-gigabyte cost and its zone binding.

4 quiz 11 cards 4 terms

VPC Design

Address planning, peering and the ranges you can never resize.

3 quiz 9 cards 3 terms

Subnetting

Tiering, zone binding, and sizing for an address-hungry platform.

3 quiz 9 cards 3 terms

Routing & BGP

How traffic finds you, anycast, and route withdrawal as a failure mode.

2 quiz 8 cards 5 terms

Service Mesh Networking

Sidecar proxies supplying mTLS, retries and traffic policy.

4 quiz 11 cards 3 terms

WebSockets & Realtime

Persistent bidirectional connections and the capacity model they impose.

6 quiz 13 cards 6 terms

gRPC Transport

HTTP/2 multiplexing, binary encoding and streaming semantics.

4 quiz 12 cards 3 terms

API Gateways

The single entry point, and the business logic that must stay out of it.

3 quiz 10 cards 4 terms

Network Performance

Latency floors, bandwidth-delay product, and what no code change fixes.

5 quiz 13 cards 5 terms

Network Troubleshooting

Flow logs, packet paths, and localising a problem to a hop.

6 quiz 8 cards 3 terms