Usando AWS re:Post, accetti AWS re:Post Termini di utilizzo
AWS re:Postre:Post

How to use site to site VPN connect to multiple different region of VPC in one VPN connection?

1

I have three resource in three region. I want to use site to site VPN to create connection between on-premise and AWS cloud. It's best for me is that create one VPN connection to one of VPCs region and it can route to another two region VPCs. Is it possible using VPC peering to archive or only transit gateway can do this? Any suggestion?

Argomenti
Networking e distribuzione di contenuti
Tag
Amazon VPCGateway AWS TransitRete privata virtuale AWS (VPN)
Lingua
English
PEN
posta un anno fa1120 visualizzazioni
2 Risposte
1

What your looking for is a Hub and spoke topology. Yes you can achieve this the way you describe. Either way will work. If you want something simple, create a new VPN VPC (HUB), then peer each VPC to this central HUB VPC. In the HUB VPC setup VPN to here. Remember VPC Peering isnt transitive, only the Hub will be able too connect to the other VPCs directly.

Transit gateway will give you a full mesh and is easier to manage than peering all VPC's with each other..

Question: Do you have any CIDR overlap?

profile picture
ESPERTO
Gary Mclean
con risposta un anno fa
  • rePost-User-1574623
    un anno fa

    so it is not possible that the 2 branches to communicate with each other ?

0

Keep in mind Transit Gateway is a regional construct, you can not attach a VPC in other region to a Transit gateway in other region.

In general, having dependency on one region for connectivity to two other regions is sort of anti-pattern, you may want to look at options to connect to three regions independently to each other from resiliency standpoint.

Enter image description here

Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-transit-gateway-vpn.html

profile pictureAWS
ESPERTO
Tushar_J
con risposta un anno fa
  • Gary Mclean ESPERTO
    un anno fa

    Why use a 3rd party piece of software when you can use transit gateway peering to peer another TG in another region and build your multi region transit gateway deployment.

  • Tushar_J ESPERTO
    un anno fa

    I removed that particular comment of using 3rd party appliance. TGW inter-region peering will work however there is still dependency on that one TGW for connectivity to three regions. Also, TGW peering only supports Static routing today, no dynamic routing over peering connection.

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande

Contenuto pertinente