vpc peering
TRANSCRIPT
VPC PeeringBrock TubreTECHNICAL INSTRUCTOR
VPC Peering Single AccountVPC PEERING
Coding Software Inc.
TestProduction Development
TEST-VPN-PEERPROD-VPN-PEER DEV-VPN-PEER
DevelopmentProduction Test
Software VPN Endpoint LimitationsVPC PEERING
Compute Costs There will be additional costs. You will pay for the EC2 cost and specific software licenses for VPN endpoints.
1
High Availability CostsTo create high availability you will need multiple EC2 instances running. This will incur even more costs.
2
Personnel CostsThere are going to be added costs to pay someone to manage these EC2 software VPN endpoints.
3
Software VPN Endpoint LimitationsVPC PEERING
Performance IssuesPerformance issues might be a problem even with large EC2 instances.
4
Security Group UsefulnessYou are limited to using IP ranges from the remote end of the software VPN endpoint.
5
DNS NamesThere could be issues with internal communications due to how private IPs are resolved.
6
VPC Peering in AWSVPC PEERING
Coding Software Inc.
TestProduction Development
DevelopmentProduction Test
p c x - x x x x x
VPC peeringconnection
VPC peeringconnection
VPC peeringconnection
T r a n s i t i v ep e e r i n g
VPC Peering in AWSVPC PEERING
Coding Software Inc.
TestProduction Development
p c x - x x x x x
VPC peeringconnection
1 0 . 0 . 0 . 0 / 2 4 1 0 . 0 . 1 . 0 / 2 4
Production (local) wants to establish VPC peering connection with Test (remote).
VPC Peering in AWSVPC PEERING
VPC Peering in AWSVPC PEERING
VPC Peering in AWSVPC PEERING
VPC Peering in AWSVPC PEERING
Local VPC Route Table
VPC Peering Route TablesVPC PEERING
Test VPC CIDR
Remote VPC Route Table
Prod VPC CIDR
VPC Peering and Security GroupsVPC PEERING
Production Test
AdminHost
SG-Admin
Prod-WEB
SG-WebAccess
T C P 2 2
VPC peeringconnection
Test-WEB
SG-WebAccess
T C P 2 2
VPC Peering DNS ResolutionVPC PEERING
Production Test
AdminHost
SG-Admin
a
Prod-WEB
SG-WebAccess
T C P 2 2 Test-WEB
SG-WebAccess
1) Allow DNS resolution from peer VPC
2) Allow DNS resolution from local VPC
1 0 . 0 . 0 . 1 5
1 . 2 . 3 . 4
i p - 1 0 - 0 - 0 - 1 5 . R E G I O N . c o m p u t e . i n t e r n a l
e c 2 - 1 - 2 - 3 - 4 . R E G I O N . a m a z o n a w s . c o m
VPC peeringconnection
T C P 2 2
VPC Peering DNS ResolutionVPC PEERING
VPC Peering DNS ResolutionVPC PEERING
Fast TakeawaysVPC PEERING
Understand the applications that can benefit from VPC peering
Peering to one VPC to access centralized resources
Peering two or more VPCs to provide full access to resources