In my last post I talked about the basics of IPv6 and how it’s implemented in an AWS VPC. In addition to IPv6-only subnets, AWS also announced support for NAT64 and DNS64. If you don’t know what that means or why it’s useful, stick around as we walk through what these new features are, how they work, and get hands-on with a demo.
During the AWS DC Summit in September, AWS announced upcoming support for IPv6-only networking as part of the keynote speech. If, like me, you haven’t paid much attention to IPv6 before, you’re not alone - as of October 2021, Google showed that only 36% of its users were able to access their services over IPv6. Even Amazon.com doesn’t appear to support IPv6 for customer traffic!
AWS Network Firewall can use a combination of stateless and stateful rule groups for filtering traffic in a firewall policy. Each Network Firewall rule type, stateless and stateful, has a hard limit of 30,000 capacity ‘units’ per firewall policy.
In this post we’ll take a look at how forward proxies work, setting up a working example using Squid.
Private DNS for AWS PrivateLink is a feature that allows you to create private, custom DNS names for internal or third-party PrivateLink services. In this post, we’ll look at an example using WhySirens.com, the premier webapp that tells you why you’re currently hearing police, fire, or ambulance sirens.
Learn how to configure ICMP, HTTP(S), and DNS health checks on RouterOS
I’ve used Pi-hole on a Raspberry Pi as a DNS resolver and adblocker in my home network for several years. While performing some recabling recently I accidentally disconnected the Pi-hole from the core switch, much to the chagrin of everyone else using the internet in the house.
AWS recently removed the internet gateway requirement for NAT gateway, essentially creating the ability to use NAT gateway for private traffic. NAT and AWS PrivateLink are both recommended options for providing connectivity between VPCs with overlapping CIDR blocks. In this post, we’ll walk through how this new private NAT gateway functionality fits as a solution, and how it compares to PrivateLink.