AWS Site-to-site VPN Static routing and Virtual Private Gateway failover

0

Hi,

I'm new in the VPN subject and In our company we provisioned a site to site VPN using static routing and VIrtual Private Gateway with a remote network, we followed the documentation and configured everything, the vpn connection's tunnels went up on both ends, AWS randomly choose one tunnel (let's say tunnel1) to send traffic as it says in the doc, in short everything was working. But after some time, the tunnel1 went down, and we verified that failover for tunnel2 didn't worked, traffic to the remote network wasn't directed to the tunnel2, even in CloudWatch metrics we verified that DataIn and DataOut stopped registering. In the docs AWS says: "Each Site-to-Site VPN connection has two tunnels, with each tunnel using a unique public IP address. It is important to configure both tunnels for redundancy. When one tunnel becomes unavailable (for example, down for maintenance), network traffic is automatically routed to the available tunnel for that specific Site-to-Site VPN connection."

But in some articles in the internet it says that we need to use BGP for automatic failover, do failover works for VPN using static routing or we need to configure some tool\feature to help AWS to identify that it needs to failover to the second tunnel, or it just works with BGP?

Thanks, Regards.

질문됨 일 년 전671회 조회
1개 답변
2
수락된 답변

See this statement from the VPN documentation If you are looking for seamless failover/failback suggest looking at BGP based VPN tunnels.


We recommend that you use BGP-capable devices, when available, because the BGP protocol offers robust liveness detection checks that can assist failover to the second VPN tunnel if the first tunnel goes down. Devices that don't support BGP may also perform health checks to assist failover to the second tunnel when needed.

profile pictureAWS
전문가
답변함 일 년 전
profile pictureAWS
전문가
검토됨 일 년 전
  • I will look into that, thanks!

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인