enable communication between multiple VPCs from a single VPN connection attached to my transit gateway
We have DEV and Production servers in different AWS accounts and these account's VPC are connected via Transit Gateway. I want to connect the VPN to the same Transit gateway so that we don't need to create separate VPNs for DEV And Production account. As AWS doesn't support multiple Remote IPv4 network CIDR in to Site to Site VPN. The CIDR range for which both the accounts can be accessible is of size /16. Since it is a very big CIDR and this can cause overlapping of IP addresses for the client's Network they are not allowing it. Also they are not accepting CIDR greater than size /30. AWS support has recommended that we can consider using a dynamic VPN routing. Does anyone has any idea how we can achieve this configuration without setting up Two VPNs.
Have you seen this? https://aws.amazon.com/premiumsupport/knowledge-center/transit-gateway-connect-vpcs-from-vpn/ This looks like the scenario you are describing. Hope this helps
Adding something for one part of your question:
You can absolutely route more than a single CIDR range through Site-to-Site VPN. That's not a restriction at all. Where the misunderstanding normally is: You can only specify a single encryption domain on the VPN.
You might choose to set up the encryption domain to match your CIDR range (say, 172.24.0.0/16) that will restrict you to only routing that CIDR range on the VPN.
Instead, you should set up the encryption domain on the VPN to be 0.0.0.0/0 which means "encrypt all traffic on this VPN tunnel". The routers on either end of the tunnel (in this case, Transit Gateway and your on premises device) will only be sending traffic to the tunnel which needs to go to the remote end; and because the tunnel is set up to encrypt all traffic it will encrypt whatever traffic is sent to it even if it "belongs" to multiple CIDR ranges.
This will definitely help, Thank you for such a wonderful contribution Brettski
Relevant questions
AWS Client VPN - my systems are in different subnets that are in different VPCs
asked 5 months agoAWS Transit Gateway with Cisco ASA Routing Issues
asked a year agoTransit Gateway shared with AWS Resource Access Manager (AWS RAM) identify all accounts as external
Accepted Answerasked 3 years agoAWS Transit Gateway using multiple site VPN connections to a single VPC
Accepted Answerasked 3 years agoAWS Transit Gateway Routing Features
Accepted Answerasked 3 years agoHow to have multiple VPCs in different AWS accounts use the same physical AWS Direct Connect circuit.
Accepted Answerasked 4 years agoConnect remote sites using VPN to access on-prem via existing Direct Connect?
Accepted Answerasked 3 months agoHow does the Route 53 Resolver share endpoints across multiple accounts and VPCs?
Accepted Answerasked 3 years agoenable communication between multiple VPCs from a single VPN connection attached to my transit gateway
asked 15 days agoAppConfig and Multiple Accounts
asked 5 months ago
Thank you Valkyrie, I will go through it