3 ms·
All of AWS's VPC features are free. You get Security Groups, Subnets, Route Tables, all kinds of shenanigans in a very stable way, with basically no incidents t
by vasco 7y ago
All of AWS's VPC features are free. You get Security Groups, Subnets, Route Tables, all kinds of shenanigans in a very stable way, with basically no incidents that I can remember.
Except those are not free, they're just charged for separately under "egress transfer costs". End of the day, the engineers in the networking teams at AWS still have to get paid and that service probably also needs to run at a profit. When seen under this light, the costs make more sense to me than the usual simple view of "but bandwidth transfer costs are cheaper everywhere else!!!"
- jugg1es 7y agoNAT gateways (a required component if you want real security) cost like $30/month each and you need at least 2 for HA.
- scarface74 7y agoWell, I’ve got bad news for you, if you think NAT Gateways are required for “real security”, just wait until you enable IPv6 on AWS.....
- kawsper 7y agoCould you elaborate on this?
- scarface74 7y agoWhen you enable IPv6, there is no NATing. All of the IP addresses are public. You can use an Egress only Internet Gateway. https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat.html https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat.htm... But technically, your EC2 instance never has a public IP address. You can see for yourself by assigning a public IP address to an ENI attached to your instance and doing an ifconfig. An Internet Gateway is a one to one NAT.
- jugg1es 7y agoInteresting, I did not know this is how IPv6 worked. Need to investigate this more.
- nine_k 7y agoThe amount of work required from AWS engineers to set up security groups, routing, etc is not proportional to the amount of traffic your server produces, but is charged as if it were. This requires every egress gigabyte to generate a lot of money to be worth it. If you serve high-traffic applications, like video, you have to be Netflix.