跳至內容

Route Propagation to VPC Route Tables via Transit Gateway/DX Gateway

0

I am currently working on configuring Direct Connect (DX) connections to a Transit Gateway (TGW) using DX Gateways. I have a couple of technical questions regarding route propagation and routing behavior.

  1. After establishing DX connections to the Transit Gateway via DX Gateway, do I need to manually add individual routes in the VPC routing table for my on-premises CIDR (IP address range) via the Transit Gateway?

  2. Can I assume that the TGW attachment of subnets will automatically handle the routing of traffic from my on-premises data center to the AWS environment through the Direct Connect connections?

Any insights or clarifications would be greatly appreciated. Thank you in advance for your assistance!

已提問 2 年前檢視次數 2463 次
2 個答案
1
已接受的答案

Q. After establishing DX connections to the Transit Gateway via DX Gateway, do I need to manually add individual routes in the VPC routing table for my on-premises CIDR (IP address range) via the Transit Gateway?

Unlike VGW, you can not propagate the TGW routes into VPC route tables so you need to manually add static routes for on-premises prefixes in VPC subnet route tables pointing towards TGW

Q. Can I assume that the TGW attachment of subnets will automatically handle the routing of traffic from my on-premises data center to the AWS environment through the Direct Connect connections?

See the below statement from the documentation, you can simply propagate the Direct Connect Gateway attachment into a TGW route table and all the routes learned via DX (BGP) will be installed in the TGW route table in which you propagate the DXGW attachment:

When dynamic routing is used with a VPN attachment or a Direct Connect gateway attachment, you can propagate the routes learned from the on-premises router through BGP to any of the transit gateway route tables.

AWS
專家
已回答 2 年前
專家
已審閱 2 年前
專家
已審閱 2 年前
專家
已審閱 2 年前
0
  1. You would have to manually add a route in your subnet route table (VPC side) to route on-prem traffic to the transit gateway.
  2. Yes, assuming that you have advertised on-prem prefixes to AWS via Direct Connect (Transit VIF).

In addition to that, you would have to advertise AWS prefixes to on-prem and that can be done via the allowed prefixes tab in DXGW, refer to below for more info.

https://docs.aws.amazon.com/directconnect/latest/UserGuide/allowed-to-prefixes.html#allowed-to-prefixes-transit-gateway

AWS
已回答 2 年前
專家
已審閱 2 年前
專家
已審閱 2 年前
  • Thank you Matt

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。