🌐 Networking Services - Provider Comparison

Overview

Virtual networks, VPCs, and connectivity services form the foundation of cloud infrastructure.

Quick Comparison

AWS VPC

# Create VPC
aws ec2 create-vpc --cidr-block 10.0.0.0/16

# Create subnet
aws ec2 create-subnet \
  --vpc-id vpc-12345678 \
  --cidr-block 10.0.1.0/24

# Create security group
aws ec2 create-security-group \
  --group-name my-sg \
  --description "My security group" \
  --vpc-id vpc-12345678

GCP VPC

# Create network
gcloud compute networks create my-network --subnet-mode custom

# Create subnet
gcloud compute networks subnets create my-subnet \
  --network my-network \
  --range 10.0.1.0/24 \
  --region us-central1

# Create firewall rule
gcloud compute firewall-rules create allow-http \
  --network my-network \
  --allow tcp:80,tcp:443

Azure Virtual Network

# Create resource group
az group create --name myResourceGroup --location eastus

# Create VNet
az network vnet create \
  --resource-group myResourceGroup \
  --name myVNet \
  --address-prefix 10.0.0.0/16

# Create subnet
az network vnet subnet create \
  --resource-group myResourceGroup \
  --vnet-name myVNet \
  --name mySubnet \
  --address-prefix 10.0.0.0/24

VPC Features Comparison

Security Groups vs Network ACLs

AWS Security Groups

• Stateful (outbound automatic)

• Instance-level

• Allow by default, deny exceptions

• Best for application firewall

AWS Network ACLs

• Stateless

• Subnet-level

• Deny by default

• Best for subnet-level security

Connectivity Options

AWS VPN

• Site-to-Site VPN

• Cost: $0.05/hour + data transfer

• Speed: 1.25 Gbps

AWS Direct Connect

• Dedicated connection

• Cost: $0.30/hour + port fee

• Speed: 1, 10, 100 Gbps

GCP Cloud VPN

• IPSec tunnels

• Cost: $0.05/hour

• Speed: 1.5 Gbps

Azure VPN Gateway

• Site-to-Site, Point-to-Site

• Cost: $0.05-0.25/hour

• Speed: 1.25 Gbps

DNS Services

AWS Route 53

• Domain registration

• DNS hosting

• Health checks

• Traffic policy

GCP Cloud DNS

• Managed DNS

• Same price regardless of queries

• API-driven

Azure DNS

• Managed DNS

• Azure integration

• Alias records to Azure resources

Key Takeaways

• **VPC fundamental** for security

• **Security groups primary** firewall mechanism

• **Network ACLs additional** layer

• **VPN for hybrid** cloud

• **Direct Connect/Interconnect** for dedicated connectivity

• **DNS managed service** recommended

• **Subnets for isolation** (public/private)

• **All providers similar** pricing and features