Skip to content

Transit Gateway routes

0

I have the following: Enter image description here Anyone can help to validate whether my understanding is correct. Also question, I am not sure Step 2. why eth0 RT is selected, not eth1 RT ?

thanks so much !!

asked a year ago196 views
2 Answers
1
Accepted Answer

It is recommended to have dedicated subnets for TGW attachment ENIs in every VPC, so for your question: in step # 2 once the TGW sends the traffic to Service-VPC the traffic should land in the dedicated subnet for TGW attachment ENIs, after that the route table associated with that subnet would decide the next hop.

Also, it sounds like you are using 3rd party Firewall in the Service VPC, have you looked at Gateway Load Balancer for this use-case? Gateway Load Balancers make it easy to deploy, scale, and manage third-party virtual appliances, such as security appliances.

https://docs.aws.amazon.com/elasticloadbalancing/latest/gateway/getting-started.html

AWS
EXPERT
answered a year ago
EXPERT
reviewed a year ago
AWS
EXPERT
reviewed a year ago
EXPERT
reviewed a year ago
0

One more question to bother, 5 and 6 are right ?

thanks so much !!!

answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.