Everyone, and welcome back to the kapiloff schools.
So in today's lecture, we'll be discussing about the Egressed only Internet gateways.
So this egressed only then educators are specifically designed for the PCs which have IPv6 enabled.
So let's look into why this type of data is required.
So when it comes to IPV six, the IP addresses which are being assigned by the AWB are public erodible.
So you can consider this very similar to the elastic ipis that you received from the AWB.
Now, since these IPIS are public erodible addresses, this means that the instance in the public subnet
can initiate the connection towards the Internet through the Internet gateways.
So this is very similar and I am sure that you already know that for Internet gateways attached to the
roundtable and you have a correct group, then that easy to instance will be able to connect to the
Internet.
Now, in a similar way, the resources from the Internet can also connect to the easy to instant.
So I can initiate the connection if I have the public IP of the easy to instance and provided the firewall
rules are allowed.
So since IPV six addresses are globally unique and thus their public by default, so many times during
the use cases, there is a requirement to have a functionality where you can connect to the Internet,
but Internet should not be able to directly connect back to you.
So a simple example is navigating the private subnet.
So all the instances within the private subnet can connect towards the Internet.
But from the Internet, you directly cannot initiate a new connection back to the instances and egress
only Internet gateway, but awaits a very similar functionality to the net gateways.
Thus for the ABC.
So let's look into how the Internet gateways can be established.
So before we do that, I have one two instance running.
And if you'll see, I have what public IPV for and public IPv6 addresses.
So if I quickly do a online IPV six being and let me copy this IPv6 address and I just pasted up here
and let's check whether the Internet can initiate the connection.
So let's quickly verify.
And you see, I am able to get the perfect reply back.
Great.
So now let's go to the BBC and enable the Internet only gateways.
So generally in a society where you have a net gateway, you cannot directly from the Internet, you
will be not be able to point to that instance.
So the egress only gateway will perform similar function so that the BBC can go to the egress only gateways
create a new egress gateway and I created in the demo IPV six VPC.
Whether you see two instances.
Perfect.
So this is a gateway.
Now I just filter out by the BBC.
I go to the round table and there is one round table which is associated with the BBC and within this
you will see that I have to enter Izola and both the entries are going to the Internet gateway.
So this means that anyone from the Internet will be able to connect to my easy to instanced both on
public IP before and public IPv6 provided the security group is allowed.
So now, instead of the IWP, I'll remove the AGW entry and select AGW and I can save boffing.
So now this is like a knight gateway.
So the easy to instant's will be able to reach the Internet.
However, from the Internet you will not be able to have their direct connection back.
I would say direct new connection to the easy to instance.
So let's go back.
And let's try upping again.
So you see this thing, I had 100 percent packet loss, so this is actually acting like a gateway,
so no new connection.
So I may not be able to direct initiate a connection via the ABC towards the instance.
So this is what the egress or Internet gateway is all about.
So if you look into the architecture, you can have architecture, which is very similar to this, where
you have the destination for IPV for which is Lukáš, you have the IPV six union addresses.
This is again Loka and for the easy to instanced to connect back to the Internet, you use the AIW and
so easy to enter will be able to reach the Internet.
However, the Internet will not be able to reach back to the U.S. to instant's very similar to that
gateway again.
So this is it about the Egressed only Internet gateways.
I hope this has been informative for you.
And I look forward to see you in the next lecture.