故意破坏 AWS 网络以增强其弹性.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.DEV343Craig JohnsonPrincipal Solutions ArchitectForward NetworksBreaking AWS networks on purpose t

2、o build resilience 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Its-a me!Craig JohnsonOn prem network engineer for way too longOperations,architecture,post sales,pre-sales,etc8 years at the mothership in post sa

3、lesMostly a CLI junkie,network gearheadAWS Community Builder,3x CCIE(Expired lol)TX(NUG)Group leadercaptainpacket 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.In this house we use the CLI!All IaC code available at the end 2025,Amazon Web Services,Inc.or its affiliates.All right

4、s reserved.Todays Game PlanBreaking your Network for Fun and ProfitHow to gather a baselineDo I trust my application flows?Verifying my network on INTENTIteration on this,and call to action 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Network engineer goodies!2025,Amazon Web Se

5、rvices,Inc.or its affiliates.All rights reserved.aws networkmanager create-global-network Initial creationaws networkmanager create-site Create your on-prem sites-global-network-id x -location Latitude=string,Longitude=string#Optionalaws networkmanager create-device -global-network-id x -site-id x-l

6、ocation Latitude=string,Longitude=string#Optionalaws networkmanager create-link-global-network-id x Create link associated with on-prem site-site-id x -bandwidth UploadSpeed=x,Downloadspeed=x Add in your TGW/DCs/VPNs/etcVisualize your Network FirstMulti-account also possible with IAMRoleForAWSNetwor