기본적인 VPC를 설계한다.
AZ-C와 AZ-D에 NAT Gateway는 포함하지 않는다.
모든 가용 영역의 dedicated subnet은 생성하지 않는다.
VPC 생성
AWS VPC > Your VPCs > Create VPC
Subnets 생성
AWS VPC > Subnets > Create subnet
아래와 같이 총 16개의 서브넷을 생성한다.
| Subnet name | Availability Zone | IPv4 CIDR block |
|---|---|---|
| secretgarden-private-subnet-A | Asia Pacific (Seoul) / ap-northeast-2a | 10.1.0.0/19 |
| secretgarden-private-subnet-B | Asia Pacific (Seoul) / ap-northeast-2b | 10.1.32.0/19 |
| secretgarden-private-subnet-C | Asia Pacific (Seoul) / ap-northeast-2c | 10.1.64.0/19 |
| secretgarden-private-subnet-D | Asia Pacific (Seoul) / ap-northeast-2d | 10.1.96.0/19 |
| secretgarden-public-subnet-A | Asia Pacific (Seoul) / ap-northeast-2a | 10.1.128.0/20 |
| secretgarden-public-subnet-B | Asia Pacific (Seoul) / ap-northeast-2b | 10.1.144.0/20 |
| secretgarden-public-subnet-C | Asia Pacific (Seoul) / ap-northeast-2c | 10.1.160.0/20 |
| secretgarden-public-subnet-D | Asia Pacific (Seoul) / ap-northeast-2d | 10.1.176.0/20 |
| secretgarden-dedicated-subnet-A | Asia Pacific (Seoul) / ap-northeast-2a | 10.1.192.0/21 |
| secretgarden-dedicated-subnet-B | Asia Pacific (Seoul) / ap-northeast-2b | 10.1.200.0/21 |
| secretgarden-dedicated-subnet-C | Asia Pacific (Seoul) / ap-northeast-2c | 10.1.208.0/21 |
| secretgarden-dedicated-subnet-D | Asia Pacific (Seoul) / ap-northeast-2d | 10.1.216.0/21 |
Internet Gateway 생성
AWS VPC > Internet gateways > Create internet gateway
Attach to VPC
Elastic IP 생성
| Elastic IP |
|---|
| secretgarden-private-eip-A |
| secretgarden-private-eip-B |
NAT Gateway 생성
AWS VPC > NAT gateways > Create NAT gateway
| NAT Gateway | Subnet | Elastic IP |
|---|---|---|
| secretgarden-private-nat-gateway-A | secretgarden-public-subnet-A | secretgarden-private-eip-A |
| secretgarden-private-nat-gateway-B | secretgarden-public-subnet-B | secretgarden-private-eip-A |
Route Tables 생성
AWS VPC > Route tables > Create route table
| Router Name | Associate With | Is Public |
|---|---|---|
| secretgarden-private-router-A | secretgarden-private-subnet-A | false |
| secretgarden-private-router-B | secretgarden-private-subnet-B | false |
| secretgarden-private-router-C | secretgarden-private-subnet-C | false |
| secretgarden-private-router-D | secretgarden-private-subnet-D | false |
| secretgarden-public-router-A | secretgarden-public-subnet-A | true |
| secretgarden-public-router-B | secretgarden-public-subnet-B | true |
| secretgarden-public-router-C | secretgarden-public-subnet-C | true |
| secretgarden-public-router-D | secretgarden-public-subnet-D | true |
Internet Gateway 연결 && Subnet associations 지정
AWS VPC > Route tables > rtb-xxxxxxxxxx
| Router Name | Associate With | IG | NAT |
|---|---|---|---|
| secretgarden-private-router-A | secretgarden-private-subnet-A | igw-01aced29b677adaf5 | |
| secretgarden-private-router-B | secretgarden-private-subnet-B | igw-01aced29b677adaf5 | |
| secretgarden-private-router-C | secretgarden-private-subnet-C | igw-01aced29b677adaf5 | |
| secretgarden-private-router-D | secretgarden-private-subnet-D | igw-01aced29b677adaf5 | |
| secretgarden-public-router-A | secretgarden-public-subnet-A | nat-0c14171e9b914e168 | |
| secretgarden-public-router-B | secretgarden-public-subnet-B | nat-09aeb6d9432210689 | |
| secretgarden-public-router-C | secretgarden-public-subnet-C | ||
| secretgarden-public-router-D | secretgarden-public-subnet-D |
Internet Gateway 연결
Subnet assocations 연결
완료
not a person you are looking for