- Newest
- Most votes
- Most comments
Hello.
I think it is communicating with the network within AWS.
https://aws.amazon.com/vpc/faqs/?nc1=h_ls
Does traffic go over the internet when two instances communicate using public IP addresses, or when instances communicate with a public AWS service endpoint?
No. When using public IP addresses, all communication between instances and services hosted in AWS use AWS's private network. Packets that originate from the AWS network with a destination on the AWS network stay on the AWS global network, except traffic to or from AWS China Regions.In addition, all data flowing across the AWS global network that interconnects our data centers and Regions is automatically encrypted at the physical layer before it leaves our secured facilities. Additional encryption layers exist as well; for example, all VPC cross-region peering traffic, and customer or service-to-service Transport Layer Security (TLS) connections.
It stays on AWS's backbone network, except in the AWS partition for China. It's stated in this document article: https://docs.aws.amazon.com/vpc/latest/userguide/how-it-works.html#what-is-aws-global-network
Hello.
Traffic stays within AWS
Here's the simple breakdown:
Public IP in AWS:
Even though your EC2 instances have public IP addresses, they're for internal AWS routing, not the real internet.
Public Endpoints (Internal):
Public endpoints for services within the same region translate to internal AWS addresses.
AWS Backbone:
Traffic travels securely and quickly over the dedicated AWS network within the region.
Traffic between Public EC2 Instances (Same Region):
It should be on the AWS Backbone network, not the internet.
Check if your instances are in the same region. Different regions might use the internet.
Verify Security Groups: Ensure rules allow traffic between your instances' IP addresses or security groups.
Please follow official AWS documentation that elaborates on AWS EC2 networking in detail, including security groups and traffic flow within a region:
https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/what-are-vpc-endpoints.html
Relevant content
- asked 2 years ago
- asked a year ago