AWS Virtual Cloud (VPC) is Amazon Web Services' isolated cloud network service that lets users define their own virtual networking environment in the AWS cloud. It provides control over IP address ranges, subnets, route tables, and network gateways.
When you create a VPC, you specify an IPv4 address range in CIDR notation (e.g., 10.0.0.0/16). This defines the primary IP address space for your VPC. You can then divide this space into smaller subnets, each corresponding to an availability zone within an AWS region.
For example, a VPC with CIDR block 10.0.0.0/16 could have two subnets: 10.0.0.0/24 in Availability Zone A and 10.0.1.0/24 in Availability Zone B. These subnets can be public (accessible from the internet) or private (isolated).
AWS Virtual Cloud supports both IPv4 and IPv6 addressing. You can associate an elastic IP address with instances in your VPC, enabling them to have static public IP addresses.
| Component | Description |
|---|---|
| Subnet | A range of IP addresses in your VPC. Subnets can be public or private. |
| Route Table | Determines how traffic is directed within your VPC and to other networks. |
| Internet Gateway | Allows communication between instances in your VPC and the internet. |
| Network Access Control List (ACL) | Acts as a firewall that controls traffic at the subnet level. |
| Security Group | Acts as a virtual firewall for instances, controlling inbound and outbound traffic. |
Organizations use AWS Virtual Cloud to host multi-tier web applications, with web servers in public subnets and database servers in private subnets. This setup helps only the web tier is accessible from the internet, while the database tier remains protected.
AWS Virtual Cloud is also used for disaster recovery and high availability architectures. By deploying resources across multiple subnets and availability zones, organizations can achieve fault tolerance and ensure business continuity.
Another common confusion is between VPCs and AWS Direct Connect, which establishes a dedicated network connection from your premises to AWS. While Direct Connect can be used to connect your on-premises network to a VPC, they serve different purposes.
I once helped a client migrate their on-premises data center to AWS. We used AWS Virtual Cloud to recreate their existing network topology in the cloud, ensuring minimal disruption to their applications and services during the transition.