스폰서 발표 세션 | KINX와 함께 하는 AWS Direct Connect 도입 남시우 매니저, KINX AWS Direct Connect는 AWS와 온프레미스 사이에 프라이빗 연결을 설정해 일관된 네트워크 성능, 비용 절감, 대역폭 처리량 증대 등의 이점을 제공하는 서비스입니다. 2016년 AWS 서울 리전 오픈부터 함께해 온 인터넷 인프라 전문기업 (주)케이아이엔엑스(KINX)는 AWS Direct Connect를 도입하고자 하는 기업을 위한 핵심 노하우를 공유하고자 합니다. 본 세션에서는 AWS Direct Connect에 손쉽게 연결하는 방법과 함께 AWS Direct Connect의 네트워크 구성을 기반으로 한 실제 활용사례, AWS Direct Connect를 바탕으로 한 제조업 분야의 중국지사 연결 방안을 소개합니다.

1. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
S U M M I T
S E O U L
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS201 : AWS Direct Connect
AWS Cloud
VPC
AWS Cloud
Amazon
S3
Amazon
DynamoDB
System
Manager
System
Catalog
VPC
PrivateLink
Bastion Host
SSL VPN Server
EC2 ELB Kinesis
SSH / RDP
SSL VPN
1110111011010010101110110110111101110001101010011010100011
Peering
End Points
1010111011010101011101101101111011100100100011
Site to Site IPsec VPN
Instances
On-Premise
Traditional
Server
AWS Direct Connect
VPC
Instances

4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS201 : AWS Direct Connect
On-Premise
Traditional
Server
AWS Direct Connect
VPC
Instances

5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
인터커넥션
Datacenter Cabling : https://youtu.be/sN8YS1kqX2I

7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
다수의 로케이션, 클라우드,
데이터를 상호 연결, 사용자와
서비스 간 네트워크 지연현상 해결 및
트래픽 현지화/비용절감
하이브리드 및 멀티클라우드 아키텍처의
활용을 위해 분산된 IT인프라와
CSP/파트너와의 상호연결 필요
온프레미스와 CSP의 연결을 통해
트래픽의 세분화 및 복잡성 해결
보안 서비스를 서로 연결하고
허브의 보안 구성을 확장하여
보안 위협 저감
데이터의 상호 연결성을 확보하여
데이터의 분석 및 통합적인 제어 가능

8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. Equinix : Global Interconnection Index, 2018
# 디지털 트랜스포메이션 가속화에 따른 상호연결(인터커넥션)
수요 증가
# 인터커넥션은 분산되어 있는 자원과 주요 데이터를 안전하게
직접 연결하는 방식
# 인터커넥션의 지속적인 성장 예상 / 2021년, 82Tbps (CAGR 48%)

9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Direct Connect를 사용하면 데이터센터,
사무실 또는 코로케이션 환경과 AWS 간에 사설
네트워크 연결을 지원합니다.
AWS Direct Connect는 인터넷 기반 연결보다
네트워크 비용을 줄이고 처리양을 늘리며
일관된 환경을 제공할 수 있습니다.

11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
온프레미스와 AWS 연결을 위한 인터커넥션 서비스 제공
KINX의 데이터센터 어디서나 동일한 환경의 네트워크 구성 지원 (상암, 가산, 도곡, 분당)
국내 주요 통신사의 전용회선이 모두 연결이 가능한 중립적 데이터센터 (Neutral Datacenter)
KINX IDC
On-Premise
Traditional
Server
KINX MMR
MEET-ME-ROOM
Public
Public
Public
Cross Connect Cross Connect

14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
KINX 분당센터
KINX 상암센터
KINX 도곡센터
KINX 가산센터
(Local Connection)
KINX 데이터센터
他 데이터센터

15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
회선 구간 ISP Bandwidth Latency
가산 ~ 가산 KINX 1G 1ms
가산 ~ 분당 KINX 1G 2ms
가산 ~ 목동 KT 50M 3ms
가산 ~ 역삼 KT 10M 3ms
가산 ~ 선릉 SK 10M 3ms
가산 ~ 송도 SK 2M 5ms
1ms
3ms
3ms
2ms
5ms

16. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
On-Premise
Traditional
Server
VPC
Public Cloud
KINX (DX Location)
VPC
고객사 랙
인터커넥션 &
CloudExchange
AWS DX
Routers
전용회선
Customers Network
Backbone
Customers
Router
Cross Connect CSP Network
AWS Cloud
Customers side Partner side CSP side
Instances
Instances

17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
고객사 랙 CSP 공간MMR (Meet Me Room)
Cross-Connect Cross-Connect
Cross-Connect
Patch Panel Patch Panel

18. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
BGP 구성 시 기존 네트워크 환경을 고려하여 구성
Private VIF 구성 시 연동 VPC CIDR만 수신
Public VIF 구성 시 AWS Region 내 Prefix 수신(약 2000EA)
interface GigabitEthernet0/1
no ip address
interface GigabitEthernet0/1.VLAN_NUMBER
description "Direct Connect to your Amazon VPC
or AWS Cloud"
encapsulation dot1Q VLAN_NUMBER
ip address YOUR_PEER_IP
router bgp CUSTOMER_BGP_ASN
neighbor AWS_PEER_IP remote-as 7224
neighbor AWS_PEER_IP password MD5_key
network 0.0.0.0
exit
! Optionally configure Bidirectional Forwarding
Detection (BFD).
interface GigabitEthernet0/1.VLAN_NUMBER
bfd interval 300 min_rx 300 multiplier 3
router bgp CUSTOMER_BGP_ASN
neighbor AWS_PEER_IP fall-over bfd
Cisco IOS
feature interface-vlan
vlan VLAN_NUMBER
name "Direct Connect to your Amazon VPC or AWS
Cloud"
interface VlanVLAN_NUMBER
ip address YOUR_PEER_IP/30
no shutdown
interface Ethernet0/1
switchport
switchport mode trunk
switchport trunk allowed vlan VLAN_NUMBER
no shutdown
router bgp CUSTOMER_BGP_ASN
address-family ipv4 unicast
network 0.0.0.0
neighbor AWS_PEER_IP remote-as 7224
password 0 MD5_key
address-family ipv4 unicast
! Optionally configure Bidirectional Forwarding
Detection (BFD).
feature bfd
interface VlanVLAN_NUMBER
bfd interval 300 min_rx 300 multiplier 3
router bgp CUSTOMER_BGP_ASN
neighbor AWS_PEER_IP remote-as 7224
bfd
Cisco NX-OS Juniper JunOS
configure exclusive
edit interfaces ge-0/0/1
set description "Direct Connect to your Amazon VPC or
AWS Cloud"
set flexible-vlan-tagging
set mtu 1522
edit unit 0
set vlan-id VLAN_NUMBER
set family inet mtu 1500
set family inet address YOUR_PEER_IP
top
edit policy-options policy-statement EXPORT-DEFAULT
edit term DEFAULT
set from route-filter 0.0.0.0/0 exact
set then accept
up
edit term REJECT
set then reject
top
set routing-options autonomous-system
CUSTOMER_BGP_ASN
edit protocols bgp group EBGP
set type external
set peer-as 7224
edit neighbor AWS_PEER_IP
set local-address YOUR_PEER_IP
set export EXPORT-DEFAULT
set authentication-key "MD5_key"
top
commit check
commit and-quit
# Optionally configure Bidirectional Forwarding Detection
(BFD).
set protocols bgp group EBGP neighbor AWS_PEER_IP bfd-
liveness-detection minimum-interval 300
set protocols bgp group EBGP neighbor AWS_PEER_IP bfd-
liveness-detection multiplier 3
On-Premise AWS Cloud
VPCBGP
Amazon
S3
Amazon
DynamoDB
Traditional
Server
AWS DX
Routers
Instances

19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 클라우드허브 콘솔을 통한 가상라우터
네트워킹 서비스 제공
- AWS DX BGP 연동
- 클라우드허브 콘솔 모니터링 및 푸시 알람 제공
- Automation 환경 지원 (Y19 Q4)
- KINX 엔지니어를 통한 Full Managed Service
- AWS와 On-Premise 간 네트워크 설계 지원
- AWS 및 다양한 Public Cloud의 인터커넥션
환경 제공
- Layer2 Networking

20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
On-Premise
인터넷(VPN백업)
DX Location
전용회선
AWS Cloud
VPC
VPC
On-Premise
DX Location
40Gbps
AWS Cloud
VPC
VPC
On-Premise
DX Location
전용회선
AWS Cloud
VPC
VPC
On-Premise AWS Cloud
VPC
VPC
DX Location
KINX
LGU+
전용회선 + VPN LAG (Link Aggregation Group)
커넥션 이중화 로케이션 이중화
전용회선
전용회선
© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS DX
Routers
AWS DX
Routers
AWS DX
Routers
AWS DX
Routers
AWS DX
Routers
Amazon
S3
Amazon
DynamoDB
Amazon
S3
Amazon
DynamoDB
Amazon
S3
Amazon
DynamoDB
Amazon
S3
Amazon
DynamoDB
Traditional
Server
Traditional
Server
Traditional
Server
Traditional
Server

21. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Direct Connect
Gateway
AWS Transit Gateway
VPC Peering
• AWS 리전에 연결되어 있는 복수의 VPC 연결
• 대역폭 제한 없음
• VPC별 BGP 세션 설정 불필요
• DX Public VIF를 통해 VPN over Public VIF로 구성 가능 (§)
• 복수의 VPC 연결
• VPC을 VGW가 아닌 TGW와 연결 ( 터널당: 1.25 Gbps 지원 )
• 두 VPC 사이의 네트워크 연결
• 다른 리전 간 VPC 피어링 연결 제공
• Day2 Track5 11:10 AM – 12:00 PM
• AWS Direct Connect 를 통한 하이브리드 클라우드 아키텍쳐 설계
김용우 솔루션즈 아키텍트, AWS
AWS Direct Connect gateway 를 통한 글로벌 서비스 네트워크 구성 방법
• Day2 Track5 2:10 PM – 3:00 PM
• AWS Transit Gateway를 통한 Multi-VPC 아키텍처 패턴
강동환 솔루션즈 아키텍트, AWS
VPC간 연동을 제공하는 Transit Gateway(TGW)

22. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

23. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
• ConnectionBpsEgress
• ConnectionBpsIngress
• ConnectionPpsEgress
• ConnectionPpsIngress
• ConnectionCRCErrorCount
• ConnectionState
• ConnectionLightLevelTx
• ConnectionLightLevelRx
전송량 (Ingress/Egress) 링크 상태 및 오류

24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

26. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
User Portal AWS Consulting Partner Portal

27. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

28. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

29. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

30. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

31. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
User Portal AWS Consulting Partner Portal

32. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

33. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

34. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

35. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
On-Premise
Traditional
Server
VPC
KINX
(가산)
AWS Cloud
KINX
(분당)
VPC
VPCTransit VPC
Account “A”
Account “B”
① On-Premise와 가까운 위치인 KINX(분당)을 전용회선으로 연결
② 분당~가산(DX Location) 간 KINX Backbone 연결
③ DX 및 Transit VPC를 통한 다수의 리전/어카운트 연동
AWS DX
Routers
Instances
Instances
Instances

36. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
① AWS ~ 중국 간 KINX CDC를 활용한 네트워크 구성
② CDC (Active), IP Transit 국제 (Standby)
③ AWS ~ KINX 간 DX 혹은 VPN (IPsec) 이용
중국 (On-Premise)
Traditional
Server
KINX (가산) AWS Cloud
VPC
Router
(DX
BGP)
KINX Router
(국제)
China Direct Connect
(Active)
IP Transit 국제
(Standby)
IP Transit 국내
AWS DX
Routers
Instances

37. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
① DX를 이용한 단기 마이그레이션 환경 제공
② 가상라우터(VRF)를 이용한 매니지드 서비스 제공
KINX (가산) AWS Cloud
VPC
가상라우터
(VRF)
고객사 자원
(서버 / 스토리지)
On-Premise
자원 이동
Instances
AWS DX
Routers

38. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
① 지정된 사용자의 AWS Console 접속 허용 정책 수립
② DX Public VIF 구성 (AWS IP 이용)
③ 필요 시 On-Premise ~ DX Location 간 초저속 전용회선 (TDM) 구성 가능
KINX (가산) AWS Cloud
가상라우터
(VRF)
On-Premise
Site-to-Site
VPN
AWS DX
Routers

39. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

40. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
1Gbps and 10Gbps 대역폭 지원
고객사가 AWS Management Console
을 통해 DX Connection 생성
50 to 500Mbps 대역폭 지원
DX Partner(KINX)가 Partner Console을 통해
DX Connection 생성
이후 고객사가 DX Connection에 대한
‘연결수락’ 진행

41. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
최대 72시간 내 승인
총 소요시간 3주~4주
2~3일
2~3일

42. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
siwoo198@kinx.net