Blog

NAT

what is NAT?
-> A set of process – remapping SRC or DST IPs

NAT does IP masquerading – it hides CIDR blocks behind one IP

It gives private CIDR range outgoing internet access

NAT Architecture:

1. private CIDR blocks will be re-mapped via its Route Table and will be passed to NAT Gateway
2. NAT Gateway will then be re-mapped and will be passed to Internet GateWay
3. Ta-da! Public internet access!

NACL

filter what comes in/out of VPC subnet which means connection within a subnet aren’t impacted by NACLs

NACL is stateless, inbound and outbound needs to be specified (if applicable)

each subnet can be associated with one NACL whereas one NACL can be associated with many subnet

When objects are stored a “HTTP/1.1 200 OK” response is probided by S3 API endpoint
It uses Cycling Redunadncy Checks to see corruption and fix.

S3 Standard

• has a milliseconds first byte latency(very fast delivery) and object ca be made publicly available
• price per 1000 request

S3 Standard-IA

• per GB data retrieval fee, overall cost increase with frequent data access
• has a minimum capacity charge of 128KB per object
• has minimum duration charge of 30 days (like, you will still be charge worth of 30 days even if you retreive the data before its 30 days renewal period)

S3 One Zone-IA

• has minimum duration charge of 30 days
• only has one az
• retreival fee per GB exist
• cheapest classes

S3 Glacier-Instant

• retreival fee
• minimum duration charge is 90 days
• millisecond access
• 3az

S3 Glacier-Flexible

• 3az
• storage cost is cheap
• cold obj (not immediately availble)
• require retrieival process
• minuite to hour to retreive

S3 Glacier-Deep Archive

• 40KB min billable size
• 180 Day min billable duration
• retreival take longer than flexible
• first byte latency: hours to days

S3 Intelligent-Tiering

• divided by tiers;frequenct access, infrequent access, archive instant access, archive access, deep archive
• it monitors object usuage and automatically assign which tier it goes into
• As objects are access they’re moved back to the frequent access tier. There are no trieval fees for accessing objects
• has monitoring, automation cost
• good for when usuage is changing

S3 is

• Global Storage Platform – regional based/resilient
• Public service, unlimited data & multi_user
• Movies, Audio, Photos, Text, Large Data sets
• Economical & accessed via UI/CLI/API/HTTP

Object:
Key/Value pair, say you have koala.jpg then
key: koala.jpg
value: (some binary of that image)

object size can go up to 5TB

S3 bucket is GLOBALLY UNIQUE, so no same bucket name (just like your riot account)
S3 is flat structure, not like file system where we have folders.
S3 bucket has 100 soft limit and 1000 hard limit
Key = name, Value=data

S3 is an object store – not file or block
you can’t mount a S3 bucket as (K:/ or /images)