vpc peering

VPC PeeringBrock TubreTECHNICAL INSTRUCTOR

VPC Peering Single AccountVPC PEERING

Coding Software Inc.

TestProduction Development

TEST-VPN-PEERPROD-VPN-PEER DEV-VPN-PEER

DevelopmentProduction Test

Software VPN Endpoint LimitationsVPC PEERING

Compute Costs There will be additional costs. You will pay for the EC2 cost and specific software licenses for VPN endpoints.

1

High Availability CostsTo create high availability you will need multiple EC2 instances running. This will incur even more costs.

2

Personnel CostsThere are going to be added costs to pay someone to manage these EC2 software VPN endpoints.

3

Software VPN Endpoint LimitationsVPC PEERING

Performance IssuesPerformance issues might be a problem even with large EC2 instances.

4

Security Group UsefulnessYou are limited to using IP ranges from the remote end of the software VPN endpoint.

5

DNS NamesThere could be issues with internal communications due to how private IPs are resolved.

6

VPC Peering in AWSVPC PEERING



DevelopmentProduction Test

p c x - x x x x x

VPC peeringconnection



T r a n s i t i v ep e e r i n g




p c x - x x x x x


1 0 . 0 . 0 . 0 / 2 4 1 0 . 0 . 1 . 0 / 2 4

Production (local) wants to establish VPC peering connection with Test (remote).

Local VPC Route Table

VPC Peering Route TablesVPC PEERING

Test VPC CIDR

Remote VPC Route Table

Prod VPC CIDR

VPC Peering and Security GroupsVPC PEERING

Production Test

AdminHost

SG-Admin

Prod-WEB

SG-WebAccess

T C P 2 2


Test-WEB

SG-WebAccess

T C P 2 2

VPC Peering DNS ResolutionVPC PEERING

Production Test

AdminHost

SG-Admin

a

Prod-WEB

SG-WebAccess

T C P 2 2 Test-WEB

SG-WebAccess

1) Allow DNS resolution from peer VPC

2) Allow DNS resolution from local VPC

1 0 . 0 . 0 . 1 5

1 . 2 . 3 . 4

i p - 1 0 - 0 - 0 - 1 5 . R E G I O N . c o m p u t e . i n t e r n a l

e c 2 - 1 - 2 - 3 - 4 . R E G I O N . a m a z o n a w s . c o m


T C P 2 2

VPC Peering DNS ResolutionVPC PEERING

Fast TakeawaysVPC PEERING

Understand the applications that can benefit from VPC peering

Peering to one VPC to access centralized resources

Peering two or more VPCs to provide full access to resources

vpc peering

Documents