Mastering AWS Private Link(VPC Endpoint Service) | VPC Endpoints | Network LoadBalancer - Part 20

[@kamkum2k]

Thanks Rahul, although I am an Solution Architect and know everything, But I still follow your session for practice, you have a teaching style that nobody have, very clean, beautiful presentation, again thanks, please keep it up.

[@RahulWagh]

Great to hear that 😊

[@shivkant5039]

Hi can we connect at linkedin

[@varatharajandhamotharan1511]

oh!! you know everything 😂

[@NobixLee]

The diagram helps so much in improving understanding. This is great content

[@sujanshah7442]

Finally my confusion for endpoint and private link is over. Kudos to you Sir

[@RahulWagh]

Glad to hear that

[@sandipwakchaure1214]

One more great Session on VPC. Very nicely explained in detailed. Keep us in learning phase by posting more videos. As usual, great job!!!

[@RahulWagh]

Thanks a ton

[@vipulwarthe]

"Watching your "AWS course" 20 episode has been an incredible experience. The point-to-point explanations are clear and concise, making complex concepts easy to understand. use of simple language is perfect for learners at all levels. Additionally, the course features comprehensive video content on end-to-end real-time projects in cloud and DevOps, providing practical knowledge and skills that are invaluable for cracking any interview. Great work, Rahul!" Please create more videos on end-to-end real-time projects for cloud and DevOps.

[@RahulWagh]

Thanks being a valued subscriber I really appreciate your feedback. Keep following you will see more in upcoming weeks

[@eddiezhai480]

Rahul， you are my big brother at aws , the content is very clean and easy understanding , thanks a lot !

[@RahulWagh]

Glad to hear that

[@ArunaNishantha]

Thank you, Rahul Wagh, for the fantastic AWS course! Your clear explanations and practical examples made complex topics easy to understand. I truly appreciate the effort you put into this content. Keep up the great work!

[@amansingh-sp7oo]

Dear Rahul, your way of understanding topics in a very easy way is really awesome! I'm eagerly waiting for your other AWS topic videos (like ECS, ECR, and the rest). Also, I have a request: please create another playlist for some real-time scenario-based content. I hope you'll upload it soon.

[@RahulPawar-rg3fp]

Thank you for the detailed explanation and the interactive practical session. Your teaching style is excellent.

[@RahulWagh]

Glad it was helpful!

[@subhaspaul495]

Thank you much for the detailed and indepth aws course for begineers

[@RahulWagh]

You're very welcome!

[@karthikeyanc749]

Great session, Thanks much !!! Contents are very clear and your teaching way is way too easy to understand, Please keep up the great work !!

[@RahulWagh]

Cheers and great to hear that😊

[@SureshKumar-kh5ht]

Thanks a lot RAHUL for providing indeapth knowledge about vpc end point services.

[@RahulWagh]

You are most welcome and I hope you learned something new

[@Giridhar_KS]

Another Gem of a Session. Thank you for the clear explanation. Great Job indeed!!

[@RahulWagh]

Glad it was helpful!

[@SumitAnand-b8p]

Thanks man, this is what I was looking for. The way you explained. It makes sense and it is so simple.

[@RahulWagh]

Glad it helped!

[@MKS-hb3fo]

Thank you for providing these contents. You must have a big heart.

[@RahulWagh]

You are welcomed

[@NagasekharReddy-f7t]

Hi Rahul, Your clear explanations and practical examples made complex topics easy to understand. i have some questions on this. 1. Can we do the same thing for the 3 tier applications for frontend and backend services? 2. Can we implement these same scenarios on different regions for consumers and producers and also in different accounts as well?

[@RahulWagh]

Yes you can do on 3 tier as well as do the cross region as well

[@ShashiKumar-jc3gy]

Thanks a lot Rahul. This session is really very interesting. It cleared me so many concepts on VPC 🙂

[@RahulWagh]

Glad to hear that

[@6ixnogood640]

Thanks! Great video. Easy to follow. Excited to go through more of your videos

[@rohithcc69]

Great content and excellent presentation. Thank You.

[@akinakin1372]

As always, a very useful content from Rahul. Thanks

[@RahulWagh]

Always welcome

[@ahmedsalahel-din1311]

Thank you a lot for this wonderful video I am wondering if this implementation works fine between VPCs in different regions.

[@chillhub8073]

Thanks alot for your efforts. Learnt so much. Love ❤❤

[@RahulWagh]

My pleasure 😊

[@naveenramneni8533]

Thank you very much sir, nice explanation a big concept in a simple way .

[@RahulWagh]

You are welcome

[@raghuveer120]

Another Great video Rahul. Keep educating us.

[@RahulWagh]

Surely you will see more in upcoming weeks and months

[@pratappadhy2005]

Best series so far. You are a legend Bro

[@RahulWagh]

Glad to know you learned something!

[@AkashSharma-lk4yd]

Thanks Rahul👏 Now I can say that I know VPC Endpoints😄

[@RahulWagh]

Glad to hear that

[@Gzzzzzz111]

Any difference in using the public consumer instance to call the vpce?

[@vino7tech]

The best aws tutorial. 🙏🙏🙏

[@RahulWagh]

Glad you liked

[@arghanishmukherjee9950]

thanks rahul for such inofrmative video , I have a doubt on the setup , I followed the steps of creating the NLB and TG but my EC2 instance is failing health check , when i see the traget group info , I checked the secuirty group and have added the TCP 80 port and also tested port 80 connection from the ec2 instance , it listens to port 80 , Any Suggestion would be helpful

[@NasreenKhan-kx9wl]

Superb explanation, Great job.

[@RahulWagh]

Glad it helped!

[@nebolos]

Thanks Rahul Wagh for another great video👏👏👏. Please can you do another video and add An ASG to th setup?

[@RahulWagh]

There is already on the autoscaling

[@Lalitha-l1n]

Hello Rahul, everything is perfect in this play list, but we are expecting some notes,. So that we can revise the topics in less time.really appreciate your efforts man.

[@RahulWagh]

Point taken i will try to share the notes in the upcoming sessions

[@heisenberg-15]

Fantastic lecture!!!

[@RahulWagh]

Glad you liked it!

[@danielsato5631]

Thanks Rahul, this is a very helpful tutorial. I tried to follow this tutorial but with 2 different accounts, but I got the timed out error trying to curl the endpoint in the consumer side. The only difference I added to mine was the principle (arn:aws:iam::account_id:root) for the provider's VPC endpoint service, so that the consumer can discover the vpc endpoint service. I wonder if there is anything I have to edit with the security rule, etc?

[@yoyobro3217]

I am also facing same errors, its not able curl right?

[@danielsato5631]

@@yoyobro3217 Yes, I got timed out

[@munteanionut3993]

Thank you very much for this series! Could you please make a video about ENI (Elastic Network Interface) & EIP (Elastic IPs)? Also maybe Endpoints vs Service Endpoints (in AWS console in VPC dashboard they show up as different options in the left sidebar)? I think that would be very useful and would add to this series in a very nice manner. Thank you very much!

[@sleeepymoe]

what should I do if I want the same setup but with https rather than http, also given that the service provider side can only have TCP listeners on their NLB rather than TLS on the NLB, as the SSL with be terminated on the backend server, I am getting a certificate mismatch error while curling the endpoint

[@bezosjustin]

HI Rahul. Thanks for sharing your knowledge. I as I beginner to learn AWS is helping . I wanted to ask if it’s possible to have the dark board for the key scrips writing on iPad. Is its possible or we can only have it on laptop? Thanks you

[@hugomartinezf]

Hi Rahul I really like the way you explain, Is it possible to have an example using a cross account communication?

[@RahulWagh]

I am planning for cross account transitgateway peering soon

[@subramonianmurugan8123]

Thumps up to you Rahul. Well explained.

[@RahulWagh]

You are welcome

[@MrDakoNas]

This is great explanation of vpc private link and endpoint but my only problem is enabling all those security groups on 80 everywhere. That kind of ruined the entire exercise. The private consumer ec2 instance should only allow the load balancer security group on 80. But it isn’t not clear to me what rule to use for the NLB security group to allow if we don’t allow all. Since the NLB is private does that mean it will only allow private. May be the rule on that security group Is not needed since the traffic is stablished from the connection to the other vpc endpoint. Same with the consumer endpoint,its security group should not have inbound since it is consumer.

[@Day_ly_vlogs]

Hi Rahul, the above explained can also be called as consumer to producer private link?

[@RahulWagh]

It’s true it is also called private link

[@VijayaBaskarvvk]

Simply superb.!!!

[@RahulWagh]

Welcome

[@soumeshnayak4546]

Thank you for providing these contents👌

[@RahulWagh]

You are welcome

[@karthickrajam4114]

Appreciate your efforts really loved your contents❤

[@RahulWagh]

Thank you so much 😀

[@arturoaltamirano1376]

Rahul, Excellent presentation. I have a question, why does the VPC endpoint have the text "Public Subnet" next to it?. Should it be Private Subnet? since it is linked to it.

[@VijayaBaskarvvk]

If I am not wrong, Basically, he tries to explain that traffic is not going out via internet, its routed through aws network. It serves security and performance. However, you have a valid point.. But if you assume that your on-prem server is connected directly with aws cloud by using aws private link his idea is correct. Just like a split tunnel only interesting traffic pass via aws private link. correct me if I am wrong.

[@KaranRavat-gk4hq]

Hi Rahul suppose i am using s3 as frontend & ec2 elb as backend ( private subnet ) then it is posssible?

[@mameli45]

Congrats for the video. Is it possible to use PrivateLink between VPCs from different accounts?

[@RahulWagh]

Yes, absolutely

[@ManishJindalmanisism]

Great session Was there any specific reason for creating bastion hosts, we could ssh into private ec2 instances with vpc instance endpoint

[@RahulWagh]

In actual practice we always do not have vpc instance endpoints for larger teams so that is why we go with bastion host

[@kowshikkumar4918]

Hello Rahul, I have one question. How this vpc private link different from aws transit gateway. Similar functionality we can achieve by using transit gateway as well correct?

[@venkatrao7868]

Rahul, you are amazing and I subscribed to your channel as well !!

[@RahulWagh]

You are welcome

[@hansonoshiobughie7662]

Thank you Rahul, How woudld you connect this to AWS Direct connect

[@adityakirankorlepara4500]

Superb explaination again. Subscribed to your channel :).

[@RahulWagh]

Glad you enjoyed

[@himakar9999]

Thanks for your all your efforts

[@RahulWagh]

You are welcome

[@sureshkrish-l2z]

Good appreciate your work

[@RahulWagh]

So nice of you

[@salamabdul730]

Your AWS course explanation is excellent. Could you kindly develop an Azure course following AWS? It would greatly benefit for future Azure learners and need to apologize for expressing wishes. Thank you for your great work sir.

[@RahulWagh]

Surely it is on my list but need to find the time for it

[@HosniBoun]

That was very beneficial, thank you

[@RahulWagh]

Glad it was helpful!

[@ubaidmundewadi6368]

Hello Rahul, Instead of using private link can i use Transit Gateway or Site-to-site VPN connection or AWS direct connect? What advantage private link has over other methods?

[@RahulWagh]

The advantage of this approach is we are not leaving the AWS environment. All the requests between the VPCs are traversing within AWS. While the in the other approach we might need to rely on internet because our request traverse via internet in s2s vpn and direct connect and which is not secured.

[@ubaidmundewadi6368]

@@RahulWagh Thanks for your response Rahul. For s2s vpn the request traverse over the public internet but for direct connect and transit gateway we use the AWS private network which is secured. I guess Direct connect will be an expensive option and will also take time to establish the connection. Not sure what advantage private link has over Transit Gateway. Correct me if I'm wrong

[@thapasujan07]

Hello Sir, are there any upcoming videos in this series? Please upload more videos like these. Thank you very much for your efforts, Sir.

[@RahulWagh]

Yes, soon

[@prashlovessamosa]

Rahul what should I learn after this I completed all the stuff practically.

[@AktherAli363]

Just Amazing

[@abhitonyin]

Hi Rahul, Can you please explain or create shot Video only for Interface Endpoint to access like S3 Bucket.

[@hema-val]

Good job brother!

[@RahulWagh]

Thanks for the visit

[@hemanathrajendran7581]

Consumer we are using vpc endpoints. Where as in onprem we wont have vpc endpoints right? how we can achieve it?

[@RahulWagh]

To access the vpc endpoint from on premise you need to have aws direct connect or vpn between on premise and aws cloud

[@hemanathrajendran7581]

@@RahulWagh Thankyou, Sir. If possible can you please make a video on AWS direct connect?

[@RahulWagh]

It is on my list you see it soon

[@hemanathrajendran7581]

@@RahulWagh Great, thanks

[@pavanjoshi1]

@@RahulWagh Again a awesome topic and its explanation. I have a little question and also confusion here. Like we created end point in consumer site to talk to endpoint service in the provider VPC. In the case of on prem where can we tell on-prem network to connect to provider endpoint serice? Right now using S2S we have access to enire VPC networks.

[@AmirJethroDeLeon]

Thank you Rahul for wonderful tutorials 🫶

[@PriyankaSharma-wf7sg]

Hi @RahulWagh, I recently used AWs Provate link to talk to NLB of svc in EKS, so basically to expose an EKS service privately, how should I use this apporach for multiple services of EKS ? Do I need add multple LBs and private links ?

[@RahulWagh]

Private link should only be one but you need to add multiple NLBs

[@PriyankaSharma-wf7sg]

@@RahulWagh but how the nlb will know which service to redirect traffic to?

[@pradeep1326]

Eagerly waiting sir...

[@RahulWagh]

It is live now

[@fadi07full]

Why don't we use peering as it does the same job for communicating the instances privately in different VPCs, what is more cost effect in Private link and peering?

[@RahulWagh]

how about when you have different accounts and vpcs withing those account then how will you achieve

[@fadi07full]

yes aws does not support cross account peering as GCP does @@RahulWagh

[@fadi07full]

aws supports cross account peering as well right? and peering is routing traffic via internet or aws private network? @@RahulWagh

[@cristiangonzalez8096]

why it can only let me add one subnet for endpoint (consumer VPC)?

[@RahulWagh]

In AWS, you can only associate one subnet per endpoint interface in a VPC. This restriction ensures proper network isolation and security within the VPC architecture. If you need to connect resources in multiple subnets to an endpoint, you'll have to create multiple endpoint interfaces, each associated with a different subnet.

[@tanmaymuduli4828]

Hi sir thank you so much. Your videos are great. Could you please make some advance things like real time works that would be great.

[@RahulWagh]

It’s on my list soon you will see more

[@aravindur2297]

Can we use the alb instead of nlb here?

[@RahulWagh]

No you can’t use ALB here because we are using TCP layer and this setup is not supported on ALB

[@hydro6527]

Hi sir, Could you please teachs us how to recovery application which included load balancer using snapshot and ami and how to replicate in another region.

[@harshithargandhudi1380]

waiting fo this vpc end point tutorial

[@RahulWagh]

There is already one session for Vic endpoint but this will also cover Vic endpoint, vpc endpoint service (aws private link) and network load balancer

[@harshithargandhudi1380]

ya i practiced vpc endpoint by refering that session only thanks a lot for ur amazing explanation@@RahulWagh

[@akashmishra2940]

Thanks brother

[@RahulWagh]

No problem

[@raghuveer120]

Waiting for this video

[@RahulWagh]

You will enjoy it. It is a long video make sure to follow the complete end to end

[@shrikantdesai6973]

nice video

[@RahulWagh]

Thanks for the visit

[@kals1284]

Good and great but don’t need to spend time on public subnet and tgw and igw. This would save a lot of time and to the point

[@AlokPrajapati-fu4rf]

can you please make an tutorial on site to site vpn

[@RahulWagh]

I will add it to my list of todo

[@AlokPrajapati-lt8iz]

can you please share the shown ppt

[@RahulWagh]

I will try my best to find and share

[@barath4703]

Hi Rahul please make a video for shell Scripting

[@RahulWagh]

Surely

[@Guruyadav-f7g]

Sir please provide migration videos

[@RahulWagh]

Migration of what?

[@Guruyadav-f7g]

@@RahulWagh AWS migration videos

[@surajmane9090]

u said we don't use NAT Gate WAy for private subnets in real time so what we use for internet access

[@RahulWagh]

For enforcing more security you shouldn’t be adding nat gateways directly there should be some proxies around

[@surajmane9090]

@@RahulWagh please tell why we can apply

[@bhavikvegad3449]

thank you so much for all your contents !! its really helpful !! keep making !! @Rahul Wagh

[@RahulWagh]

You are welcome

[@RaviKesana]

account to Account sharing rahul wagh