Route Propagation to VPC Route Tables via Transit Gateway/DX Gateway

0

I am currently working on configuring Direct Connect (DX) connections to a Transit Gateway (TGW) using DX Gateways. I have a couple of technical questions regarding route propagation and routing behavior.

  1. After establishing DX connections to the Transit Gateway via DX Gateway, do I need to manually add individual routes in the VPC routing table for my on-premises CIDR (IP address range) via the Transit Gateway?

  2. Can I assume that the TGW attachment of subnets will automatically handle the routing of traffic from my on-premises data center to the AWS environment through the Direct Connect connections?

Any insights or clarifications would be greatly appreciated. Thank you in advance for your assistance!

Ali Md
질문됨 10달 전685회 조회
2개 답변
1
수락된 답변

Q. After establishing DX connections to the Transit Gateway via DX Gateway, do I need to manually add individual routes in the VPC routing table for my on-premises CIDR (IP address range) via the Transit Gateway?

Unlike VGW, you can not propagate the TGW routes into VPC route tables so you need to manually add static routes for on-premises prefixes in VPC subnet route tables pointing towards TGW

Q. Can I assume that the TGW attachment of subnets will automatically handle the routing of traffic from my on-premises data center to the AWS environment through the Direct Connect connections?

See the below statement from the documentation, you can simply propagate the Direct Connect Gateway attachment into a TGW route table and all the routes learned via DX (BGP) will be installed in the TGW route table in which you propagate the DXGW attachment:

When dynamic routing is used with a VPN attachment or a Direct Connect gateway attachment, you can propagate the routes learned from the on-premises router through BGP to any of the transit gateway route tables.

profile pictureAWS
전문가
답변함 10달 전
profile picture
전문가
검토됨 12일 전
profile picture
전문가
검토됨 10달 전
profile picture
전문가
검토됨 10달 전
  • Thanks Tushar

0
  1. You would have to manually add a route in your subnet route table (VPC side) to route on-prem traffic to the transit gateway.
  2. Yes, assuming that you have advertised on-prem prefixes to AWS via Direct Connect (Transit VIF).

In addition to that, you would have to advertise AWS prefixes to on-prem and that can be done via the allowed prefixes tab in DXGW, refer to below for more info.

https://docs.aws.amazon.com/directconnect/latest/UserGuide/allowed-to-prefixes.html#allowed-to-prefixes-transit-gateway

profile pictureAWS
Matt_E
답변함 10달 전
profile picture
전문가
검토됨 10달 전
profile picture
전문가
검토됨 10달 전
  • Thank you Matt

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인