{"id":4297,"date":"2025-12-30T17:25:49","date_gmt":"2025-12-30T09:25:49","guid":{"rendered":"https:\/\/aws-oncloudai.com\/?p=4297"},"modified":"2025-12-30T17:25:49","modified_gmt":"2025-12-30T09:25:49","slug":"comprehensive-analysis-of-aws-subnet-building-a-secure-and-reliable-cloud-network-foundation","status":"publish","type":"post","link":"https:\/\/aws-oncloudai.com\/zh_hk\/comprehensive-analysis-of-aws-subnet-building-a-secure-and-reliable-cloud-network-foundation\/","title":{"rendered":"AWS Subnet \u5168\u89e3\u6790\uff1a\u5efa\u7f6e\u5b89\u5168\u53ef\u9760\u7684\u96f2\u7aef\u7db2\u8def\u57fa\u790e"},"content":{"rendered":"

\u5728\u96f2\u7aef\u904b\u7b97\u74b0\u5883\u4e0b\uff0c\u7db2\u8def\u67b6\u69cb\u662f\u4f01\u696d\u4e0a\u96f2\u7aef\u7684\u6838\u5fc3\u57fa\u790e\uff0c\u800cAWS \u7684 \u865b\u64ec\u79c1\u6709\u96f2\uff08VPC\uff09<\/strong> \u5247\u63d0\u4f9b\u4e86\u9748\u6d3b\u3001\u53ef\u63a7\u7684\u7db2\u8def\u74b0\u5883\u3002\u5728VPC \u5167\uff0cSubnet\uff08\u5b50\u7db2\u8def\uff09<\/strong> \u662f\u7d44\u7e54\u548c\u9694\u96e2\u96f2\u7aef\u8cc7\u6e90\u7684\u95dc\u9375\u55ae\u5143\u3002\u8eab\u70baAWS \u5b98\u65b9\u8a8d\u8b49\u4ee3\u7406\u5546\uff0c\u6211\u5011\u5c07\u5f9e\u6982\u5ff5\u3001\u5206\u985e\u3001\u8a2d\u8a08\u539f\u5247\u5230\u61c9\u7528\u5be6\u8e10\uff0c\u5168\u65b9\u4f4d\u89e3\u8b80AWS Subnet \u7684\u50f9\u503c\u8207\u61c9\u7528\u60c5\u5883\u3002<\/p>\n

 <\/p>\n

\u4ec0\u9ebc\u662fAWS Subnet\uff1f<\/h4>\n

Subnet\uff08\u5b50\u7db2\u8def\uff09<\/strong> \u662fVPC \u5167\u7684\u4e00\u584a IP \u4f4d\u5740\u7bc4\u570d<\/strong>\uff0c\u7528\u65bc\u5728\u865b\u64ec\u7db2\u8def\u4e2d\u90e8\u7f72\u548c\u9694\u96e2\u8cc7\u6e90\u3002\u6bcf\u500bSubnet \u90fd\u5c6c\u65bc\u7279\u5b9a\u7684 \u53ef\u7528\u5340\uff08AZ\uff09<\/strong>\uff0c\u8cc7\u6e90\u5728Subnet \u5167\u904b\u4f5c\u6642\u53ef\u4ee5\u7e7c\u627f\u5176\u7db2\u8def\u548c\u5b89\u5168\u6027\u914d\u7f6e\u3002<\/p>\n

\u7c21\u55ae\u7406\u89e3\uff1a<\/p>\n

    \n
  • VPC<\/strong> \u662f\u4f01\u696d\u7684\u865b\u64ec\u7db2\u8def\u5712\u5340<\/li>\n
  • Subnet<\/strong> \u662f\u5712\u5340\u5167\u7684\u793e\u5340<\/li>\n
  • \u6bcf\u500b\u5c0f\u5340\u6709\u81ea\u5df1\u7684IP \u4f4d\u5740\u6bb5\u3001\u8def\u7531\u8868\u548c\u5b89\u5168\u6027\u7b56\u7565<\/li>\n<\/ul>\n

    Subnet \u7684\u6838\u5fc3\u4f5c\u7528\u5305\u62ec\uff1a<\/p>\n

      \n
    1. \u6d41\u91cf\u9694\u96e2<\/strong>\uff1a\u4e0d\u540c\u985e\u578b\u7684\u8cc7\u6e90\u90e8\u7f72\u5728\u4e0d\u540cSubnet\uff0c\u63d0\u5347\u5b89\u5168\u6027<\/li>\n
    2. \u9ad8\u53ef\u7528\u6027<\/strong>\uff1a\u900f\u904e\u591a\u500bSubnet \u5206\u4f48\u5728\u4e0d\u540cAZ\uff0c\u5be6\u73fe\u5bb9\u932f<\/li>\n
    3. IP \u7ba1\u7406<\/strong>\uff1a\u6e05\u6670\u5283\u5206IP \u4f4d\u5740\u6bb5\uff0c\u65b9\u4fbf\u64f4\u5145\u8207\u898f\u5283<\/li>\n
    4. \u5b89\u5168\u63a7\u5236<\/strong>\uff1a\u7d50\u5408\u5b89\u5168\u7fa4\u7d44\u548c\u7db2\u8defACL\uff0c\u5be6\u73fe\u5167\u5916\u7db2\u8def\u5b58\u53d6\u7cbe\u7d30\u5316\u7ba1\u7406<\/li>\n<\/ol>\n

       <\/p>\n

      Subnet \u985e\u578b\u8207\u61c9\u7528<\/h4>\n

      \u6839\u64da\u662f\u5426\u76f4\u63a5\u5b58\u53d6\u4e92\u806f\u7db2\uff0cAWS Subnet \u5206\u70ba\u4ee5\u4e0b\u5e7e\u985e\uff1a<\/p>\n

      1. \u516c\u6709\u5b50\u7db2\u8def\uff08Public Subnet\uff09<\/h5>\n
        \n
      • \u7279\u9ede<\/strong>\uff1a\u53ef\u76f4\u63a5\u4e0a\u7db2\uff0c\u9700\u95dc\u806f Internet Gateway<\/strong> \u4e26\u914d\u7f6e\u8def\u7531\u8868<\/li>\n
      • \u9069\u7528\u5834\u666f<\/strong>\uff1aWeb \u4f3a\u670d\u5668\u3001NAT \u7db2\u95dc\u3001\u61c9\u7528\u7db2\u95dc\u7b49\u5c0d\u5916\u63d0\u4f9b\u670d\u52d9\u7684\u8cc7\u6e90<\/li>\n
      • \u7bc4\u4f8b<\/strong>\uff1a\u90e8\u7f72\u4e00\u500b\u5c0d\u5916\u958b\u653e\u7684\u4f01\u696d\u5b98\u7db2\u6216API \u7db2\u95dc<\/li>\n<\/ul>\n
        2. \u79c1\u6709\u5b50\u7db2\u8def\uff08Private Subnet\uff09<\/h5>\n
          \n
        • \u7279\u9ede<\/strong>\uff1a\u7121\u6cd5\u76f4\u63a5\u4e0a\u7db2\uff0c\u4f46\u53ef\u900f\u904e NAT \u9598\u9053<\/strong> \u6216\u5176\u4ed6\u4ee3\u7406\u5546\u8a2a\u554f\u5916\u7db2<\/li>\n
        • \u9069\u7528\u5834\u666f<\/strong>\uff1a\u8cc7\u6599\u5eab\uff08RDS\uff09\u3001\u61c9\u7528\u7a0b\u5f0f\u4f3a\u670d\u5668\uff08EC2\uff09\u3001\u5f8c\u53f0\u670d\u52d9<\/li>\n
        • \u7bc4\u4f8b<\/strong>\uff1a\u4f01\u696d\u6838\u5fc3\u8cc7\u6599\u5eab\u653e\u5728\u79c1\u6709\u5b50\u7db2\u8def\u5167\uff0c\u78ba\u4fdd\u8cc7\u6599\u5b89\u5168<\/li>\n<\/ul>\n
          3. \u53d7\u9650\u5b50\u7db2\u8def\/ VPN-only Subnet<\/h5>\n
            \n
          • \u7279\u9ede<\/strong>\uff1a\u50c5\u900f\u904e VPN<\/strong> \u6216 AWS Direct Connect<\/strong> \u8207\u672c\u5730\u7db2\u8def\u901a\u4fe1<\/li>\n
          • \u9069\u7528\u5834\u666f<\/strong>\uff1a\u9ad8\u5ea6\u654f\u611f\u7684\u696d\u52d9\u8cc7\u6599\u6216\u91d1\u878d\u3001\u91ab\u7642\u7b49\u53d7\u76e3\u7ba1\u61c9\u7528<\/li>\n
          • \u7bc4\u4f8b<\/strong>\uff1a\u4f01\u696d\u5167\u90e8\u8ca1\u52d9\u7cfb\u7d71\u6216\u91ab\u7642\u8cc7\u8a0a\u7cfb\u7d71<\/li>\n<\/ul>\n

             <\/p>\n

            Subnet \u8a2d\u8a08\u539f\u5247<\/h4>\n

            \u5728\u5efa\u69cbAWS \u96f2\u7aef\u7db2\u8def\u6642\uff0c\u5408\u7406\u7684Subnet \u8a2d\u8a08\u81f3\u95dc\u91cd\u8981\uff0c\u4e3b\u8981\u8003\u616e\u4ee5\u4e0b\u5e7e\u9ede\uff1a<\/p>\n

            1. \u53ef\u7528\u5340\u5206\u4f48<\/h5>\n

            \u70ba\u4e86\u63d0\u9ad8\u7cfb\u7d71\u7684\u53ef\u7528\u6027\uff0c\u61c9\u5728\u4e0d\u540cAZ \u5167\u5efa\u7acb\u591a\u500bSubnet\uff0c\u5c07\u95dc\u9375\u8cc7\u6e90\u5206\u6563\u90e8\u7f72\uff0c\u5be6\u73fe\u5bb9\u932f\u8207\u707d\u5099\u80fd\u529b\u3002<\/p>\n

            2. IP \u4f4d\u5740\u898f\u5283<\/h5>\n

            Subnet \u5fc5\u9808\u5206\u914d\u5408\u7406\u7684 CIDR \u5340\u584a<\/strong>\uff0c\u78ba\u4fdd\u672a\u4f86\u64f4\u5c55\u3002\u5e38\u898b\u505a\u6cd5\u662f\uff1a<\/p>\n

              \n
            • VPC CIDR\uff1a10.0.0.0\/16<\/li>\n
            • \u516c\u6709\u5b50\u7db2\u8def\uff1a10.0.1.0\/24<\/li>\n
            • \u79c1\u6709\u5b50\u7db2\u8def\uff1a10.0.2.0\/24<\/li>\n
            • \u6bcf\u500bAZ \u81f3\u5c11\u6709\u4e00\u5c0d\u516c\u6709\/\u79c1\u4eba\u5b50\u7db2<\/li>\n<\/ul>\n
              3. \u5b89\u5168\u7b56\u7565\u8207\u9694\u96e2<\/h5>\n
                \n
              • \u5b89\u5168\u7fa4\u7d44\uff08Security Group\uff09<\/strong>\uff1a\u5be6\u4f8b\u7d1a\u5b58\u53d6\u63a7\u5236<\/li>\n
              • \u7db2\u8defACL\uff08Network ACL\uff09<\/strong>\uff1a\u5b50\u7db2\u8def\u5c64\u7d1a\u5b58\u53d6\u63a7\u5236<\/li>\n
              • \u516c\u6709\u5b50\u7db2\u8def\u901a\u5e38\u5141\u8a31HTTP\/HTTPS \u8a2a\u554f\uff0c\u79c1\u6709\u5b50\u7db2\u8def\u9650\u5236\u5c0d\u5916\u6d41\u91cf<\/li>\n
              • \u5c0d\u654f\u611f\u8cc7\u6e90\u53ef\u8a2d\u5b9a\u66f4\u56b4\u683c\u7684\u5b58\u53d6\u898f\u5247<\/li>\n<\/ul>\n
                4. \u8def\u7531\u8868\u8a2d\u8a08<\/h5>\n
                  \n
                • \u516c\u6709\u5b50\u7db2\u8def\u9700\u914d\u7f6e\u9810\u8a2d\u8def\u7531\u6307\u5411 Internet Gateway<\/strong><\/li>\n
                • \u79c1\u6709\u5b50\u7db2\u8def\u9700\u914d\u7f6e\u9810\u8a2d\u8def\u7531\u6307\u5411 NAT \u9598\u9053<\/strong><\/li>\n
                • \u78ba\u4fdd\u5167\u7db2\u901a\u8a0a\u548c\u5c0d\u5916\u901a\u8a0a\u6eff\u8db3\u696d\u52d9\u9700\u6c42<\/li>\n<\/ul>\n

                   <\/p>\n

                  AWS Subnet \u7684\u61c9\u7528\u7a0b\u5f0f\u5be6\u8e10<\/h4>\n

                  1. \u9ad8\u53ef\u7528Web \u670d\u52d9\u67b6\u69cb<\/h5>\n

                  \u4f01\u696d\u53ef\u4ee5\u5728\u5169\u500bAZ \u4e2d\u90e8\u7f72 \u516c\u6709\u5b50\u7db2\u8def+ \u79c1\u6709\u5b50\u7db2\u8def<\/strong>\uff1a<\/p>\n

                    \n
                  • \u516c\u6709\u5b50\u7db2\u8def\u90e8\u7f72\u8ca0\u8f09\u5e73\u8861\u5668\uff08ALB\uff09\u548cWeb \u4f3a\u670d\u5668<\/li>\n
                  • \u79c1\u4eba\u5b50\u7db2\u8def\u90e8\u7f72\u61c9\u7528\u4f3a\u670d\u5668\u548c\u8cc7\u6599\u5eab<\/li>\n
                  • \u900f\u904eNAT \u9598\u9053\u5be6\u73fe\u79c1\u6709\u5b50\u7db2\u8def\u5b58\u53d6\u7db2\u969b\u7db2\u8def\u66f4\u65b0\u6216\u62c9\u53d6\u6578\u64da<\/li>\n<\/ul>\n

                    \u9019\u7a2e\u4f48\u5c40\u65e2\u4fdd\u8b49\u4e86\u670d\u52d9\u5c0d\u5916\u53ef\u7528\uff0c\u4e5f\u4fdd\u8b77\u4e86\u6838\u5fc3\u696d\u52d9\u8cc7\u6599\u3002<\/p>\n

                    2. \u8cc7\u6599\u5eab\u5b89\u5168\u9694\u96e2<\/h5>\n
                      \n
                    • \u5c07RDS \u6216DynamoDB \u90e8\u7f72\u5728\u79c1\u6709\u5b50\u7db2\u8def\u5167<\/li>\n
                    • \u50c5\u5141\u8a31\u61c9\u7528\u7a0b\u5f0f\u4f3a\u670d\u5668\u5b58\u53d6\u8cc7\u6599\u5eab<\/li>\n
                    • \u7d50\u5408\u7db2\u8defACL \u548c\u5b89\u5168\u7fa4\u7d44\uff0c\u963b\u65b7\u975e\u6388\u6b0a\u8a2a\u554f<\/li>\n<\/ul>\n
                      3. \u6df7\u5408\u96f2\u6216\u5c08\u7dda\u63a5\u5165<\/h5>\n
                        \n
                      • \u90e8\u7f72VPN-only Subnet \u6216Direct Connect \u9023\u7dda\u672c\u5730\u8cc7\u6599\u4e2d\u5fc3<\/li>\n
                      • \u5c0d\u654f\u611f\u696d\u52d9\u8cc7\u6599\u9032\u884c\u5c08\u7dda\u8a2a\u554f<\/li>\n
                      • \u4fdd\u8b49\u8cc7\u6599\u50b3\u8f38\u7684\u5b89\u5168\u6027\u8207\u7a69\u5b9a\u6027<\/li>\n<\/ul>\n

                         <\/p>\n

                        Subnet \u8207AWS \u670d\u52d9\u7684\u96c6\u6210<\/h4>\n

                        AWS Subnet \u8207\u591a\u7a2e\u96f2\u7aef\u670d\u52d9\u7dca\u5bc6\u7d50\u5408\uff1a<\/p>\n

                          \n
                        • EC2<\/strong>\uff1a\u5be6\u4f8b\u5fc5\u9808\u5728Subnet \u5167\u555f\u52d5<\/li>\n
                        • RDS<\/strong>\uff1a\u8cc7\u6599\u5eab\u57f7\u884c\u500b\u9ad4\u5728\u79c1\u6709\u5b50\u7db2\u8def\u5167\u66f4\u5b89\u5168<\/li>\n
                        • Elastic Load Balancer (ALB\/NLB)<\/strong>\uff1a\u901a\u5e38\u90e8\u7f72\u5728\u516c\u6709\u5b50\u7db2<\/li>\n
                        • NAT Gateway \/ VPN \/ Direct Connect<\/strong>\uff1a\u9700\u8981Subnet \u652f\u63f4\u8def\u7531\u548c\u5f48\u6027IP<\/li>\n<\/ul>\n

                          \u900f\u904e\u5408\u7406\u7684Subnet \u914d\u7f6e\uff0c\u53ef\u4ee5\u5be6\u73fe\u670d\u52d9\u7684 \u9ad8\u53ef\u7528\u6027\u3001\u5b89\u5168\u6027\u548c\u53ef\u64f4\u5145\u6027<\/strong>\u3002<\/p>\n

                          <\/h4>\n

                          \u603b\u7ed3<\/h4>\n

                          AWS Subnet \u662f\u4f01\u696d\u4e0a\u96f2\u7db2\u8def\u8a2d\u8a08\u7684\u57fa\u790e\u55ae\u5143<\/strong>\u3002\u900f\u904e\u5408\u7406\u5283\u5206\u516c\u6709\u3001\u79c1\u6709\u53ca\u53d7\u9650\u5b50\u7db2\uff0c\u4e26\u7d50\u5408\u5b89\u5168\u7fa4\u7d44\u3001\u8def\u7531\u8868\u548cNAT \u7db2\u95dc\u7b49\u7db2\u8def\u8cc7\u6e90\uff0c\u4f01\u696d\u53ef\u4ee5\uff1a<\/p>\n

                            \n
                          • \u5efa\u69cb\u5b89\u5168\u53ef\u9760\u7684\u96f2\u7aef\u67b6\u69cb<\/li>\n
                          • \u5be6\u73fe\u9ad8\u53ef\u7528\u3001\u591aAZ \u5bb9\u932f<\/li>\n
                          • \u7cbe\u7d30\u5316\u63a7\u5236\u5167\u5916\u7db2\u8a2a\u554f<\/li>\n
                          • \u6eff\u8db3\u696d\u52d9\u5b89\u5168\u8207\u5408\u898f\u8981\u6c42<\/li>\n<\/ul>\n

                            \u8eab\u70baAWS \u5b98\u65b9\u8a8d\u8b49\u4ee3\u7406\u5546\uff0c\u5728\u96f2\u7aef\u4e0a\u53ef\u4ee5\u5e6b\u52a9\u4f01\u696d\u5ba2\u6236\u9032\u884cSubnet \u8a2d\u8a08\u3001\u90e8\u7f72\u3001\u6700\u4f73\u5316\u53ca\u5b89\u5168\u7b56\u7565\u5be6\u65bd\uff0c\u78ba\u4fdd\u96f2\u7aef\u7db2\u8def\u67b6\u69cb\u9ad8\u6548\u3001\u7a69\u5b9a\u3001\u5b89\u5168\uff0c\u5354\u52a9\u4f01\u696d\u696d\u52d9\u5feb\u901f\u4e0a\u96f2\u843d\u5730\u3002<\/p>","protected":false},"excerpt":{"rendered":"

                            \u5728\u96f2\u7aef\u904b\u7b97\u74b0\u5883\u4e0b\uff0c\u7db2\u8def\u67b6\u69cb\u662f\u4f01\u696d\u4e0a\u96f2\u7aef\u7684\u6838\u5fc3\u57fa\u790e\uff0c\u800cAWS \u7684\u865b\u64ec\u79c1\u6709\u96f2\uff08VPC\uff09 \u5247\u63d0\u4f9b\u4e86\u9748\u6d3b\u3001\u53ef\u63a7\u7684\u7db2\u8def\u74b0\u5883\u3002\u5728VPC \u5167\uff0cSubnet\uff08\u5b50\u7db2\u8def\uff09 \u662f\u7d44\u7e54\u548c\u9694\u96e2\u96f2\u7aef\u8cc7\u6e90\u7684\u95dc\u9375\u55ae\u5143\u3002\u8eab\u70baAWS \u5b98\u65b9\u8a8d\u8b49\u4ee3\u7406\u5546\uff0c\u6211\u5011\u5c07\u5f9e\u6982\u5ff5\u3001\u5206\u985e\u3001\u8a2d\u8a08\u539f\u5247\u5230\u61c9\u7528\u5be6\u8e10\uff0c\u5168\u65b9\u4f4d\u89e3\u8b80AWS Subnet \u7684\u50f9\u503c\u8207\u61c9\u7528\u60c5\u5883\u3002<\/p>","protected":false},"author":1,"featured_media":4298,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[65],"tags":[],"class_list":["post-4297","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technical-sharing"],"_links":{"self":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4297","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/comments?post=4297"}],"version-history":[{"count":1,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4297\/revisions"}],"predecessor-version":[{"id":4299,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4297\/revisions\/4299"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/media\/4298"}],"wp:attachment":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/media?parent=4297"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/categories?post=4297"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/tags?post=4297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}