By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

How to use site to site VPN connect to multiple different region of VPC in one VPN connection?

1

I have three resource in three region. I want to use site to site VPN to create connection between on-premise and AWS cloud. It's best for me is that create one VPN connection to one of VPCs region and it can route to another two region VPCs. Is it possible using VPC peering to archive or only transit gateway can do this? Any suggestion?

Topics
Networking & Content Delivery
Tags
Amazon VPCAWS Transit GatewayAWS Virtual Private Network (VPN)
Language
English
PEN
asked a year ago1091 views
2 Answers
1

What your looking for is a Hub and spoke topology. Yes you can achieve this the way you describe. Either way will work. If you want something simple, create a new VPN VPC (HUB), then peer each VPC to this central HUB VPC. In the HUB VPC setup VPN to here. Remember VPC Peering isnt transitive, only the Hub will be able too connect to the other VPCs directly.

Transit gateway will give you a full mesh and is easier to manage than peering all VPC's with each other..

Question: Do you have any CIDR overlap?

profile picture
EXPERT
Gary Mclean
answered a year ago
  • rePost-User-1574623
    a year ago

    so it is not possible that the 2 branches to communicate with each other ?

0

Keep in mind Transit Gateway is a regional construct, you can not attach a VPC in other region to a Transit gateway in other region.

In general, having dependency on one region for connectivity to two other regions is sort of anti-pattern, you may want to look at options to connect to three regions independently to each other from resiliency standpoint.

Enter image description here

Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-transit-gateway-vpn.html

profile pictureAWS
EXPERT
Tushar_J
answered a year ago
  • Gary Mclean EXPERT
    a year ago

    Why use a 3rd party piece of software when you can use transit gateway peering to peer another TG in another region and build your multi region transit gateway deployment.

  • Tushar_J EXPERT
    a year ago

    I removed that particular comment of using 3rd party appliance. TGW inter-region peering will work however there is still dependency on that one TGW for connectivity to three regions. Also, TGW peering only supports Static routing today, no dynamic routing over peering connection.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content