AWS Private Network Egress Security & Optimization

Overview

NAT Gateways play a vital role in facilitating internet access for resources in Private Subnets. They are invaluable for tasks such as installing updates and connecting to external API’s. By using Aviatrix Gateways, you gain enhanced control over egress traffic while simultaneously enjoying cost savings. Aviatrix Gateways provide you with flexibility and cost efficiency, empowering you to optimize your network infrastructure while maintaining robust security measures.

What does the Aviatrix platform have to offer?

CloudNation leverages the Aviatrix platform where advanced public cloud networking and security solutions are required, it offers several advantages for hybrid and multi-cloud network architectures, like:

• Centralized control & deployment;
• Enhanced network security;
• Network visbility, monitoring & troubleshooting;
• Optimal integration with both native & 3rd party services.

By deploying Gateways with Elastic IP’s, internet traffic from Private Subnets can be routed to Aviatrix Gateways, while maintaining high availability and (auto)scaling. The pricing structure for this solution does not include a data processed cost component, allowing for predictable pricing. On top of it, the Aviatrix platform offers several additional networking and security features:

• Advanced NAT – custom source and/or destination NAT translation;
• Firewalling and FQDN filtering – egress control based on FQDN’s and/or L4/L7 traffic inspection;
• Traffic visibility – deep insight in traffic flows passing the Gateways, not just the metadata that native VPC Flow Log provides;
• Troubleshooting – simple and fast packet capture feature for closer analysis;
• Threat prevention – automatically block traffic to known malicious public IP’s;
• Predictable cost – no data cost component, so lower and more stable cloud costs.

We will help you build the business case…

If you are seeking ways to fortify and tailor your AWS egress traffic while also aiming to minimize costs associated with this service, CloudNation can quickly help you create the business case for replacement. In just one day we will:

• Analyze your AWS network environment;
• Provide valuable insights in current egress flows and costs;
• If applicable, we can propose a redesign of your egress setup with Aviatrix Gateways;
• Provide a cost calculation that will help you make a business case when implementing Aviatrix Gateways;
• When desirable we can provide you with a design, business case and implementation plan for a uniform multi or hybrid cloud networking architecture.

On average customers save 25% based on typical data transfer patterns.

…or even deploy & manage the solution

Additionally, CloudNation can perform the migration by deployment through TerraForm. When you do not want to worry about managing this solution CloudNation can even perform this for you by periodically updating Aviatrix software and TerraForm versions, providers & modules while monitoring the Gateway availability and providing 24x7 support. Through the central Aviatrix Controller you always have insight into bandwidth usage, flow analysis, perform packet capture for troubleshooting, etc.

Getting Started

In order to get started, we only need temporary access to your AWS environment(s)/account(s) with read-only cross-account credentials to manually analyze your VPC/egress setup and Cost Explorer information from relevant AWS accounts.

Pricing Information

We offer this service for a fixed price of $1500, which will provide you with valuable insights into gaining more control over your egress traffic, and help you build a business case to initiate the changes.