AWS AWSEC2 documentation change
Summary
Added new 'Interface type' configuration step (ENA, EFA with ENA, EFA-only) and renumbered subsequent steps in network interface creation process
Security assessment
The changes describe network interface performance characteristics and requirements but do not address security vulnerabilities or introduce security-specific documentation. The modifications are functional/operational in nature.
Diff
diff --git a/AWSEC2/latest/UserGuide/create-network-interface.md b/AWSEC2/latest/UserGuide/create-network-interface.md index 1e0e86c00..f6cabcc77 100644 --- a//AWSEC2/latest/UserGuide/create-network-interface.md +++ b//AWSEC2/latest/UserGuide/create-network-interface.md @@ -24 +24,9 @@ Console - 6. For **Private IPv4 address** , do one of the following: + 6. For **Interface type** , choose one of the following: + + * **ENA** : A high-performance network interface designed to handle high throughput and packet-per-second rates for TCP/IP protocols while minimizing CPU usage. This is the default value. For more information about ENA, see [Elastic Network Adapter](./enhanced-networking-ena.html). + + * **EFA with ENA** : A network interface that supports both ENA and EFA devices for traditional TCP/IP based transport along with SRD based transport. If you choose EFA with ENA, the instance you are attaching it to must [support EFA](./efa.html#efa-instance-types). For more information about EFA, see [Elastic Fabric Adapter](./efa.html). + + * **EFA-only** : A high-performance network interface designed to handle high throughput, low latency inter-node communication for SRD based transport while bypassing the operating system stack. If you choose this option, the instance you are attaching it to must [support EFA](./efa.html#efa-instance-types). EFA-only network interfaces do not support IP addresses. For more information about EFA, see [Elastic Fabric Adapter](./efa.html). + + 7. For **Private IPv4 address** , do one of the following: @@ -30 +38 @@ Console - 7. (Subnets with IPv6 addresses only) For **IPv6 address** , do one of the following: + 8. (Subnets with IPv6 addresses only) For **IPv6 address** , do one of the following: @@ -38 +46 @@ Console - 8. (Optional) If you’re creating a network interface in a dual-stack or IPv6-only subnet, you have the option to **Assign Primary IPv6 IP**. This assigns a primary IPv6 global unicast address (GUA) to the network interface. Assigning a primary IPv6 address enables you to avoid disrupting traffic to instances or ENIs. Choose **Enable** if the instance that this ENI will be attached to relies on its IPv6 address not changing. AWS will automatically assign an IPv6 address associated with the ENI attached to your instance to be the primary IPv6 address. Once you enable an IPv6 GUA address to be a primary IPv6, you can't disable it. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is terminated or the network interface is detached. If you have multiple IPv6 addresses associated with an ENI attached to your instance and you enable a primary IPv6 address, the first IPv6 GUA address associated with the ENI becomes the primary IPv6 address. + 9. (Optional) If you’re creating a network interface in a dual-stack or IPv6-only subnet, you have the option to **Assign Primary IPv6 IP**. This assigns a primary IPv6 global unicast address (GUA) to the network interface. Assigning a primary IPv6 address enables you to avoid disrupting traffic to instances or ENIs. Choose **Enable** if the instance that this ENI will be attached to relies on its IPv6 address not changing. AWS will automatically assign an IPv6 address associated with the ENI attached to your instance to be the primary IPv6 address. Once you enable an IPv6 GUA address to be a primary IPv6, you can't disable it. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is terminated or the network interface is detached. If you have multiple IPv6 addresses associated with an ENI attached to your instance and you enable a primary IPv6 address, the first IPv6 GUA address associated with the ENI becomes the primary IPv6 address. @@ -40 +48 @@ Console - 9. (Optional) To create an Elastic Fabric Adapter, choose **Elastic Fabric Adapter** , **Enable**. + 10. (Optional) To create an Elastic Fabric Adapter, choose **Elastic Fabric Adapter** , **Enable**. @@ -42 +50 @@ Console - 10. (Optional) Under **Advanced settings** , you can optionally set IP prefix delegation. For more information, see [Prefix delegation](./ec2-prefix-eni.html). + 11. (Optional) Under **Advanced settings** , you can optionally set IP prefix delegation. For more information, see [Prefix delegation](./ec2-prefix-eni.html). @@ -48 +56 @@ Console - 11. (Optional) Under **Advanced settings** , for **Idle connection tracking timeout** , modify the default idle connection timeouts. For more information, see [Idle connection tracking timeout](./security-group-connection-tracking.html#connection-tracking-timeouts). + 12. (Optional) Under **Advanced settings** , for **Idle connection tracking timeout** , modify the default idle connection timeouts. For more information, see [Idle connection tracking timeout](./security-group-connection-tracking.html#connection-tracking-timeouts). @@ -56 +64 @@ Console - 12. For **Security groups** , select one or more security groups. + 13. For **Security groups** , select one or more security groups. @@ -58 +66 @@ Console - 13. (Optional) For each tag, choose **Add new tag** and enter a tag key and an optional tag value. + 14. (Optional) For each tag, choose **Add new tag** and enter a tag key and an optional tag value. @@ -60 +68 @@ Console - 14. Choose **Create network interface**. + 15. Choose **Create network interface**.