The Power of Networking in the Cloud with Tom Scholl

Aug 29, 2024

Tom Scholl, an AWS Vice President and Distinguished Engineer, shares insights into the critical role of network engineers in maintaining cloud security. He highlights the impressive capabilities of the AWS DDoS Protection Team and discusses the evolution of networking challenges. The conversation also emphasizes the importance of collaboration among network operators to combat DDoS attacks, and the need for mentorship in developing the next generation of network professionals. Scholl’s expertise sheds light on the complexities of internet infrastructure and security.

Ask episode

Chapters

Transcript

Episode notes

Intro

00:00 • 4min

The Human Side of Networking and DDoS Mitigation

03:38 • 2min

Navigating DDoS Challenges with Cloud Solutions

06:03 • 4min

Combatting Spam and Cyber Threats in Network Management

10:03 • 8min

Navigating the Complexities of Internet Infrastructure

17:53 • 3min

Advancements in Cloud Networking and Security

20:46 • 13min

A cloud service is only as good as the team of network engineers who keep it up and running. In this episode, AWS Vice President and Distinguished Engineer Tom Scholl breaks down the importance of security and legwork needed to support the company’s massive infrastructure. Corey picks Tom’s brain while singing the praises of the AWS DDoS Protection Team, marveling at the scale of the modern internet, and looking ahead to the next generation of network engineers that could land at AWS. If you’ve ever wondered about the inner workings of the AWS cloud, then this is the discussion for you.

Show Highlights:

(0:00) Intro
(1:09) The Duckbill Group sponsor read
(1:42) The importance of a good network for AWS
(3:38) Evolution of networking
(6:03) Efficiency of the AWS DDoS Protection Team
(7:29) AWS Cloud and weathering DDoS attacks
(10:03) Policing network abuse
(12:08) Walking the SES tightrope and network attacks
(15:00) Ensuring the security of the internet
(17:53) The Duckbill Group sponsor read
(18:37) Scale of the modern internet
(20:47) Migrating the AWS network firewall
(21:54) Internal network scaling
(24:27) Preparing for DDoS disruption
(29:14) Finding the next generation of network engineers
(32:15) Where to learn more about AWS cloud security

About Tom Scholl:

Tom Scholl is a VP and Distinguished Engineer at Amazon Web Services (AWS) in the infrastructure organization. His role includes working on AWS’s global network backbone, as well as focusing on denial of service detection and mitigation systems. He has been with AWS for over 13 years.

Prior to AWS, Tom was a Principal Network Engineer at nLayer and AT&T Labs (formerly SBC Telecom). He also previously held network engineering roles at OptimalPATH Digital Network and ANET Internet Services.

Links Referenced:

AWS Security Blog: https://aws.amazon.com/blogs/security/
How AWS threat intelligence deters threat actors: https://aws.amazon.com/blogs/security/how-aws-threat-intelligence-deters-threat-actors/
Using AWS Shield Advanced protection groups to improve DDoS detection and mitigation: https://aws.amazon.com/blogs/security/using-aws-shield-advanced-protection-groups-to-improve-ddos-detection-and-mitigation/
AWS re:Inforce 2024 presentation on Sonaris and MadPot: https://www.youtube.com/watch?v=38Z9csvyFDg
NANOG 2023 presentation on AWS networking infrastructure: https://www.youtube.com/watch?v=0tcR-iQce7s
AWS re:Invent 2022 presentation on AWS networking infrastructure: https://www.youtube.com/watch?v=HJNR_dX8g8c
AWS re:Invent 2022 presentation on Scaling network performance on next-gen Amazon EC2 instances: https://www.youtube.com/watch?v=jNYpWa7gf1A&t=1373s
IEEE paper on Scalable Relatable Diagram (SRD): https://ieeexplore.ieee.org/document/9167399

Sponsor
The Duckbill Group: https://www.duckbillgroup.com/