On-premise datacentre accessing the internet via Direct Connect

0

Customer who has a datacentre with no access to internet but is connected to AWS via direct connect. Is it possible to use AWS managed network services to reach the internet? The customer would prefer to consume services provided and managed by AWS instead of looking for third party NAT devices/systems.

If this is possible, is it cost effective / best practice?

1 Risposta
0
Risposta accettata

From a pure routing perspective. Another possible option is to use TransitGateway and EgressVPC attached with the Transit Gateway. Advertise prefix 0.0.0.0/0 from TGW side to on-premises. The on-premises router then sends default traffic to TGW. TGW then sends this traffic out to the Internet via Egress VPC. This can be done by adding a static route 0.0.0.0/0 with a target to EgressVPC attachment. Egress VPC can have a NAT Gateway or other third party filtering device to NAT outgoing traffic.

AWS
mehrajk
con risposta 5 anni fa
profile picture
ESPERTO
verificato un mese fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande