Different types of network interfaces on AWS

Task Statement 3.3: Optimize AWS networks for performance, reliability, and cost-effectiveness.

📘AWS Certified Advanced Networking – Specialty


1. Elastic Network Interface (ENI)

What is ENI?

An Elastic Network Interface (ENI) is a virtual network card that you can attach to an EC2 instance inside a VPC.

It is the basic building block of networking in AWS VPCs.

An ENI can include:

  • Private IPv4 address
  • Secondary private IP addresses
  • Public IPv4 address (optional)
  • MAC address
  • Security groups
  • Source/destination check setting

Key Features of ENI

  • Can be attached and detached from EC2 instances (in the same AZ)
  • Can have multiple IP addresses
  • Supports multiple ENIs per instance
  • Each ENI belongs to a specific Availability Zone
  • Persists independently of the instance (useful for failover)

Common Use Cases of ENI

1. Management and failover design

  • A secondary ENI can be moved to a standby instance during failure

2. Network separation

  • One ENI for application traffic
  • One ENI for management traffic (e.g., SSH, monitoring agents)

3. Security segmentation

  • Different ENIs with different security groups for layered access control

4. VPC endpoints and AWS services integration

  • Many AWS services expose connectivity through ENIs inside your VPC

Exam Point

👉 ENI is the foundation of VPC networking and supports flexibility, IP management, and failover designs.


2. Elastic Network Adapter (ENA)

What is ENA?

Elastic Network Adapter (ENA) is a high-performance networking interface used by EC2 instances.

It is designed for:

  • High throughput
  • Low latency
  • High packets per second (PPS)

Key Features of ENA

  • Supports up to 100 Gbps networking
  • Uses SR-IOV (Single Root I/O Virtualization) for performance
  • Reduces CPU overhead compared to traditional networking
  • Works with supported EC2 instance types only
  • Used automatically when supported and enabled

When ENA is used

  • High-performance web applications
  • Large-scale distributed systems
  • Data-heavy workloads (e.g., analytics, big data pipelines)
  • High throughput APIs and microservices communication

Exam Point

👉 ENA improves general-purpose high-speed networking inside EC2 instances.


3. Elastic Fabric Adapter (EFA)

What is EFA?

Elastic Fabric Adapter (EFA) is a specialized network interface for high-performance computing (HPC) workloads.

It provides:

  • Very low latency
  • OS bypass networking
  • High scalability for tightly coupled workloads

Key Features of EFA

  • Supports MPI (Message Passing Interface) workloads
  • Enables direct hardware-level communication
  • Reduces network latency compared to ENA
  • Works only on supported instance types
  • Designed for cluster computing

Use Cases of EFA

1. High-Performance Computing (HPC)

  • Weather simulation
  • Scientific modeling
  • Financial risk analysis

2. Distributed machine learning training

  • Large-scale AI model training across multiple instances

3. Tight node-to-node communication systems

  • Systems requiring extremely fast inter-node messaging

Exam Point

👉 EFA is used when latency is more important than general throughput, especially in HPC environments.


4. Comparison: ENI vs ENA vs EFA

FeatureENIENAEFA
PurposeBasic VPC networkingHigh-performance EC2 networkingHPC / ultra-low latency networking
Use caseGeneral networking, IP managementHigh throughput applicationsDistributed computing, HPC
FlexibilityVery flexible (attach/detach)Instance-level featureInstance-level HPC feature
LatencyStandardLowVery low (OS bypass)
ScaleModerateHighVery high for clusters
Primary focusNetwork designPerformance optimizationHPC optimization

5. How AWS Uses Network Interfaces Internally

In AWS environments, network interfaces are used in many services:

Example (internal AWS architecture usage):

  • Load balancers (ALB/NLB) use ENIs in subnets to route traffic
  • VPC Interface Endpoints (AWS PrivateLink) create ENIs in your subnet
  • Lambda in VPC uses ENIs to connect to private resources
  • EC2 instances always rely on at least one ENI for connectivity

6. Important Exam Concepts

1. ENI is always required

Every EC2 instance must have at least one ENI.


2. ENI is AZ-bound

  • ENI cannot move across Availability Zones
  • But it can be attached to another instance in the same AZ

3. Multiple ENIs = network segmentation

Used for:

  • Security separation
  • Traffic isolation
  • Multi-homed architectures

4. ENA vs EFA selection rule

  • Choose ENA for general high-performance workloads
  • Choose EFA for HPC and distributed computing with ultra-low latency needs

5. ENI vs Elastic IP

  • ENI = network interface (IP + MAC + security groups)
  • Elastic IP = static public IP assigned to ENI

7. Exam Strategy Summary

To pass exam questions on this topic, remember:

  • ENI = basic VPC network interface (foundation layer)
  • ENA = high-performance general EC2 networking
  • EFA = HPC low-latency cluster networking
  • ENIs support multiple IPs and security groups
  • ENIs are AZ-specific and attachable/detachable
  • AWS services internally rely heavily on ENIs for connectivity
Buy Me a Coffee