News for hackers. Stuff that matters.

A comment on Fck-nat: The (f)easible (C)ost (k)onfigurable NAT. Parent comment

Re:Fck-nat: The (f)easible (C)ost (k)onfigurable NAT by outworlder on Friday February 02, 2024 @03:53PM (#39234224)
I don't know about your specific network architecture but, if you need to access AWS services from inside your VPC, make sure to configure a VPC endpoint for the services where it is available(RDS is one of them).

Far too many people forget about that and send their AWS traffic through their NAT GWs.

[ Parent | on HN ]
Re:Fck-nat: The (f)easible (C)ost (k)onfigurable NAT by icedchai on Friday February 02, 2024 @05:06PM (#39235098)
Keep in mind for low traffic sites, it may be cheaper to use NAT, if you already need it for something else. All those "VPC endpoints" can really add up. It's kind of crazy you gotta pay for the privilege of connecting to AWS from within AWS.
[ Parent | on HN ]