Multi Account Connectivity using PrivateLink and/or Transit Gateway along with Direct Connect
One of my customer want to connect with their customers in the following scenarios:-
Scenario with their Customer A
Their Customer A has a Direct Connect and they need to get connectivity to private APIs that are in their Customer A's on premise data center. I think they can use PrivateLink. Need confirmation/validation and also things to watch out for (things that might not be supported etc.). https://aws.amazon.com/blogs/aws/aws-privatelink-update-vpc-endpoints-for-your-own-applications-services/
Scenario with their Customer B
Their Customer B has a Direct Connect and wants to leverage Transit Gateway with multiple VPC to achieve something similar. Again need validation if this approach works and things to watch out for. https://aws.amazon.com/blogs/aws/use-aws-transit-gateway-direct-connect-to-centralize-and-streamline-your-network-connectivity/
Also, what should be our recommended option or pros and cons of the two solutions.
Both approaches are valid. Couple of things comes to mind:
- Customer A should make sure they have redundancy in Direct Connect connections or at least have a backup path configured via VPN.
- Direct Connect does not auto-scale in terms of bandwidth so it will be good if they keep "Acceptance Required" setting on the service so they know how much load may be coming from it's customers.
- For Customer B, it should work as Transit Gateway is just a means to reach on-premises DC. You get additional benefit of using ECMP with VPN if you want to scale beyond 1.25Gbps (VGW limit). The idea of redundancy still holds good. Two different transit interfaces to different DX connections should be recommended.
- Using TGW for accessing Private APIs use case is a overkill though. If the intent is only to access Private APIs in on-premises DC then PrivateLink is a better approach. There is more management overhead with TGW, attaching VPCs, routing, likewise.
Can we form AWS Transit Gateway attachments using <1Gbps hosted DX?Accepted Answerasked 3 years ago
VPN over Direct Connect with Transit GatewayAccepted Answerasked 3 years ago
Data Transfer OUT Charges Through TGW in Another AccountAccepted Answerasked 3 years ago
Multi Account Connectivity using PrivateLink and/or Transit Gateway along with Direct ConnectAccepted Answerasked 3 years ago
Direct Connect Gateway with 2 TGW from Same RegionAccepted Answerasked 11 days ago
Transit Gateway to Direct Connect Gateway to Transit GatewayAccepted Answerasked 2 years ago
Single DC-GW connected to multiple direct-connect linksAccepted Answerasked 3 months ago
Private link access over direct connect - Direct Connect GatewayAccepted Answerasked 4 years ago
Transit Gateway and SD-WANAccepted Answerasked 3 years ago
Summarize Transit Gateway Prefixes across Multiple TGWAccepted Answerasked a year ago