Play free

AWS · Domain

Networking

VPCs, hybrid connectivity, enterprise routing, inspection and troubleshooting. 5 worlds, 24 stages, about 11.5 hours to complete.

FeedsSAA-C03SOA-C03DEA-C01SAP-C02DOP-C02SCS-C03

World 1 · Associate

VPC Foundations

Build and secure a single VPC from the ground up.

5 stages~2 h2 free

  1. 1Open for BusinessFreeInternet gateways, route tables, and what really makes a subnet public.
  2. 2Private but ConnectedFreeOutbound-only internet access for private subnets, from one fixed address.
  3. 3Guard RailsStateful security groups, stateless network ACLs, and the ports replies use.
  4. 4Shortcut to S3Reach AWS services privately, and only the resources you mean to.
  5. 5Two StacksAdd IPv6 next to IPv4, and keep private servers private without NAT.

World 2 · Associate

Hybrid Horizons

Connect VPCs to each other and to on-premises networks.

5 stages~2 h

  1. 1Across the FenceVPC peering, and why it is not transitive.
  2. 2Hub and SpokeOne transit gateway instead of a mesh of peering connections.
  3. 3Tunnel VisionEncrypted tunnels from a data center over the internet.
  4. 4Dedicated LineA private, dedicated link from the data center to AWS.
  5. 5Service BridgeOffer one service to many VPCs without connecting their networks.

World 3 · Professional

Enterprise Scale

Multi-account, multi-Region networks that stay manageable.

5 stages~2.5 h

  1. 1Routing DomainsIsolate and share traffic with transit gateway route tables.
  2. 2Belt and BracesDirect Connect with a VPN backup, and how BGP picks a path.
  3. 3Shared ServicesShare subnets across accounts and centralize internet egress.
  4. 4Name GameResolve names between AWS and the data center.
  5. 5Two RegionsConnect Regions and send users to the nearest healthy one.

World 4 · Specialty

Deep Packet

Inspect and steer traffic at scale.

5 stages~3 h

  1. 1Inspection LaneSend every flow through a firewall without breaking symmetry.
  2. 2Bump in the WireInsert third-party appliances transparently.
  3. 3Transit VIFBring Direct Connect into a transit gateway.
  4. 4Wide AreaRun a global network from one policy.
  5. 5Global EdgeBring users onto the AWS network close to where they are.

World 5 · Specialty

Network Detective

Find out, and prove, what the network is really doing.

4 stages~2.5 h

  1. 1Flight RecorderRead VPC Flow Logs to see what was accepted and rejected.
  2. 2Path FinderProve reachability without sending a packet.
  3. 3Mirror ImageCopy live traffic to an analysis tool.
  4. 4Sealed LinksEncrypt hybrid traffic end to end.

Game types in this domain

How each one plays