Segment in cloud wan

Question

Im checking the possibility of using AWS Cloud wan for my organization, When considering the Segment, i have environment like dev, qa, uat, prod.
Also im having on prem data centers.
So for the segment i thought of having Dev Segment, QA Segment, UAT Segment, Prod Segment, Hybrid Segment and Inspection/Security Segment.
Is this the correct approach, and what are the other best practices i have to consider   , and is there any other suggestions

Didier_Durand · Accepted Answer

H,

Those blog posts will guide you toward optimal use of AWS Cloud WAN and its best practices

* https://aws.amazon.com/blogs/networking-and-content-delivery/advanced-hybrid-routing-scenarios-with-aws-cloud-wan-and-aws-direct-connect/
* https://aws.amazon.com/blogs/networking-and-content-delivery/simplify-global-security-inspection-with-aws-cloud-wan-service-insertion/

Best,

Diudier

emned · Answer

I usually recommend customers that want to leverage AWS Cloud WAN is that they need to have a look into the [quotas](https://docs.aws.amazon.com/network-manager/latest/cloudwan/cloudwan-quotas.html). Today, the max number of segments per core network is 40. Less is more imo! If for example dev, qa, and uat have the simmilar characteristics in terms of routing, maybe consolidate them into one segment?

Hope you also are aware of the isolate-attachments option in a AWS Cloud WAN policy, where you can ensure attachments in the same segment cannot communicate. This is relevant if you are integrating with external vendors or partners.

Also if you are operating in a multi region environment, I recommend having a look at [service insertion](https://docs.aws.amazon.com/network-manager/latest/cloudwan/cloudwan-policy-service-insertion.html) for AWS Cloud WAN, which will make your inspection life easier (and cheaper) for east/west traffic going from one region to another.

Segment in cloud wan

Relevant content