AWS Direct Connect- Public VIF

0

Use-case To transfer over a 1Tb of backup data from the existing location into an AWS S3 bucket. The hosted connection / DX connection will be decommissioned after 4-6 weeks when the data transfer will be completed.

I have a question that I am confused about while creating the Public VIF. Does the ‘Prefixes you want to advertise’ section mean it will only allow those CIDR/IP addresses to route to AWS over this Public VIF? My client is concerned about the security issue of using the Public IPs and want to limit it to the traffic only coming from the MCN or on-prem environment.

2 Answers
1

The setting ("Prefixes you want to advertise") is the list of public IP addresses that the customer will advertise to AWS. It is a specific list - on that connection you will only be allowed to advertise the public IP addresses that you specify. Connections to the AWS network will only be allowed from those IP addresses.

The customer should treat the Public VIF as if it was an internet connection (so, firewall, etc.) as explained here.

profile pictureAWS
EXPERT
answered 3 months ago
profile picture
EXPERT
reviewed 3 months ago
profile picture
EXPERT
reviewed 3 months ago
profile picture
EXPERT
reviewed 3 months ago
  • Can the private IPs be used in the 'Prefixes you want to advertise' to allow only the IPs from the on-prem to access the AWS ?

  • No, you cannot use private IP addressing on a public VIF.

0
Accepted Answer

You treat Public VIF as internet connection. You can't advertise private IPs. And traffic routing the Public VIF must have registered Public IP as a source. If you are going to access AWS Public services using your on-premise private network, then you will have a sort of NATing. The public IP for your NATing can be added to the "Prefixes you want to advertise".

profile pictureAWS
AmerO
answered 3 months ago
profile picture
EXPERT
reviewed 3 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions