1 Answer
- Newest
- Most votes
- Most comments
2
You're correct: The maximum bandwidth of a combined (using ECMP) set of VPNs is 50 Gb/s. The reason for having more VPN connections available is that many customers have VPN connections to multiple locations - so it's not about having a maximum of 125 Gb/s for a single link; it's that there can be multiple "logical" links (each comprising multiple tunnels).
Relevant content
- asked 2 months ago
- asked 5 years ago
AWS OFFICIALUpdated a year ago- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 5 months ago
Which means, we can not have VPN as a backup for 100G Direct connection link?
In my experience ECMP is tricky when you use many parallel links. Four is where I'd generally stop but I know customers running eight. The challenge is that the bandwidth limit on each VPN link is 1.25 Gb/s which means that traffic flows are limited to that too. Because of the way traffic is hashed it's easy to get links that are overloaded and others that are not. In theory this gets better with more links; in practice keeping that many links alive all at the same time and with equal routing metrics is difficult at best. If you're looking for encryption at 100 Gb/s I'd be spending time/money ensuring the applications are doing end-to-end encryption rather than trying to get the network to do it.