Networking & Content Delivery
Category: AWS Transit Gateway
How to use AWS Network Manager to visualize Transit Gateways across multiple accounts in the AWS Organization
When you migrate or build a new applications in AWS, you must connect multiple Amazon Virtual Private Clouds (Amazon VPCs) spread across different accounts and your on-premises systems with these VPCs. AWS Transit Gateway is one of the most popular and commonly used services in these scenarios. When you want communication/isolation between VPCs, and they also […]
Achieving traffic segmentation in multi-AWS Region environments using AWS Transit Gateway and AWS Cloud WAN
In June 2022, we announced AWS Cloud WAN in general availability, a managed wide area networking (WAN) service that makes it easy for you to build, manage, and monitor a global network connecting your resources across your AWS Regions and on-premises environments. With Cloud WAN, you have a central place to create and manage your […]
Designing hyperscale Amazon VPC networks
Introduction Amazon Web Services (AWS) customers are continuously increasing the number of applications and workloads they run on AWS, driven by accelerated cloud adoption and environment expansion. An environment can be considered “Hyperscale” once it supports thousands of application endpoints and tens or hundreds of gigabits of traffic per second. Hyperscale environments on AWS favor […]
Design patterns for interconnecting a telco data center to an Amazon VPC
Traditionally, communication service providers (CSPs) in the telecom industry have used a Virtual Routing and Forwarding (VRF) technique to segregate their data center (DC) networks per each network domains; for examples of domain such as Operation, Administration & Management (OAM), signaling, roaming, and user traffic networks. Each VRF domain in the data center must also […]
Migrating accounts between AWS Organizations from a network perspective
In this post, we’ll discuss the considerations, recommendations, and approach for migrating AWS accounts between AWS Organizations from a networking perspective. We’ll explain the behavior of AWS networking resources when AWS accounts are moved between Organizations. We’ll also analyze the behavior from different viewpoints including service availability, management and governance, as well as commercial and operations. […]
Introducing VPC Flow Logs for AWS Transit Gateway
Since the launch of Amazon Virtual Private Cloud (Amazon VPC) Flow Logs in 2015, customers have utilized VPC Flow Logs to gain better visibility of network traffic patterns on AWS by providing network telemetry data regarding the IP traffic flowing to and from ENIs within a given VPC. As customers’ networks grew, customers began utilizing […]
AWS Cloud WAN and AWS Transit Gateway migration and interoperability patterns
Update: Sep 9, 2024 – Expanded considerations section with clarification on cost dimensions. Introduction At AWS re:Invent 2021, we launched a public preview of AWS Cloud WAN, a managed service for creating a global network using AWS global network infrastructure. Cloud WAN makes it easy to build and operate global wide area networks (WAN) to […]
Introducing AWS Site-to-Site VPN Private IP VPNs
Update 10/13/22: Added walkthrough with the AWS Management console and link to code in CDK and Terraform. One of the most common ways that customers connect securely to AWS from on premises is by using the AWS Site-to-Site VPN managed IPSec VPN solution. One key benefit our customers look for when using the service is […]
Using AWS Transit Gateway connect to extend VRFs and increase IP prefix advertisement
Overview You can solve advanced network use-cases encountered by Service Providers extending AWS cloud hosted services to their customers. Doing this often requires advertising thousands of IP prefixes into the AWS cloud, while maintaining separation of unavoidable conflicting IP address space. This can be accomplished by increasing IP prefix advertisement and extending Virtual Routing and […]
How Repsol manages and monitors their AWS network with dashboards, alarms and automation
Large enterprises often deploy workloads on Amazon Web Services (AWS) using multiple accounts. This helps isolate workloads, manage permissions more easily, and simplifies cost allocation. However, managing a multi-account environment can make your network topology more complex and requires additional monitoring and automation. At Repsol, a global multi-energy company present throughout the entire value chain, […]