AWS Cloud WAN service insertion: Simplifying network inspection
summary
AWS launches Cloud WAN service insertion (announced yesterday) that auto-inserts inspection routes and removes hundreds of per-region static routes by creating a Network Function Group that points to inspection VPCs running AWS Network Firewall, Gateway Load Balancer or partner appliances. Attachments include VPCs, Transit Gateway route-table attachments, GRE 5 Gbps per tunnel / 20 Gbps per attachment and tunnel-less connect. Default inspection is single hop with regional affinity, symmetry of return flows is preserved, and policies allow edge-priority overrides and dual-hop where required.
AI-written summary · about
chapters (9)
- 0:00Introduction and setup
- 1:22What is AWS Cloud WAN
- 11:30Inspection architectures overview
- 14:04Cloud WAN service insertion feature
- 23:14Centralized egress inspection
- 29:35Cross-segment inspection
- 35:47Migration from existing Cloud WAN
- 43:04Migration from Transit Gateway
- 56:32Partner ecosystem and resources
related talks
53mBuild secure global connectivity with AWS
44mElevando la postura de seguridad con AWS Network Firewall
29mBuild resilient and secure global cloud networks
17mAWS On Air ft. Cloud WAN & Direct Connect SiteLink
11mUse AWS Network Firewall for enterprises: Egress & ingress inspection
52mFirewalls, and where to put them
29mAmazon VPC design and new VPC capabilities
28mAWS Networking Fundamentals