AWS 上的安全组
据我了解，AWS/EC2 安全组就像防火墙。但我可以问一下：
- 对于亚马逊内部人士来说，这是如何实施的？它是软件还是现成的硬件设备？
- EC2 内发生了什么。例如，安全组是否会阻止我使用其私有 IP 地址从 EC2 环境内淹没竞争网站的 HTTP 地址？我可以通过专用地址访问他们的 RDP 连接吗？
I understand that AWS/EC2 security groups are just like a firewall. But can I ask:
- How is this implemented, for you Amazon insiders? Is it software or a hardware device that's off-the-shelf?
- What happens within EC2. For example, does the security group stop me from flooding a competing website's HTTP address from within the EC2 environment, by using their private IP address? Can I access their RDP connection on the private address?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
由于还没有人回答 - 我会尝试一下 - 我不是 AWS“内部人士”，但我们已经在其上构建了一个云管理平台 - 所以我们有一些经验。
安全组与防火墙具有相同的效果，甚至在亚马逊的一些文档中，他们将其称为防火墙 - 但您无法获得与使用自己的软件或硬件相同级别的控制设备 - 您只需获得一定程度的安全规则设置功能。
在之前的业务中，我们为共享服务做了类似的事情，基本上是我们管理的一些大型硬件防火墙，但让用户能够为其虚拟机设置一些基本规则。我相信AWS也差不多。他们拥有权力，用户拥有本地虚拟机控制权。
希望来自亚马逊的人会看到这一点并为您提供更多启发！
-编者，digitalmines.com
Since no one has answered yet - I'll give it a go - I'm not an AWS 'insider' but we have built a cloud management platform on top of it - so we have some experience.
A security group is the same effect as a firewall, and even in some of Amazon's documentation they refer to it as a firewall - but you don't get the same level of control as you would with your own s/w or h/w device - you just get a level of security rule setting functionality.
In a previous business we did something similar for our shared services, and basically it was some hefty hardware firewalls that we admin'd but gave users the ability to set some basic rules for their VM's. I believe AWS is pretty much the same. They have the POWER and the user has LOCAL VM control.
Hopefully someone from Amazon will see this and shed more light for you!
-Ed, digitalmines.com