reference deployment

HashiCorp Consul on AWS

A service networking and service mesh solution to discover, connect, and secure services on AWS

This Quick Start sets up a flexible, scalable AWS Cloud environment, and launches HashiCorp Consul automatically into a configuration of your choice.

HashiCorp Consul is a tool that provides cloud networking automation by using a central registry for service-based networking.

The Quick Start includes AWS CloudFormation templates that automate the deployment, and a guide that provides step-by-step instructions to help you get the most out of your HashiCorp Consul implementation on the AWS Cloud.


This Quick Start was developed by HashiCorp, Inc. in partnership with AWS. HashiCorp is an
APN Partner.

AWS Service Catalog administrators can add this architecture to their own catalog.  

  •  What you'll build
  •  How to deploy
  •  Cost and licenses
  •  What you'll build
  • Use this Quick Start to set up the following HashiCorp Consul environment on AWS:

    • A virtual private cloud (VPC) configured with public and private subnets across three Availability Zones. This provides the network infrastructure for your HashiCorp Consul deployment.*
    • In the public subnets:
      • Linux bastion hosts to allow inbound Secure Shell (SSH) access to Amazon Elastic Compute Cloud (Amazon EC2) instances in the private subnets.*
      • Managed network address translation (NAT) gateways to allow outbound internet access for resources in the private subnets.*
      • A Classic Load Balancer with AWS Certificate Manager (ACM) attached to the Consul server cluster Auto Scaling group. You can choose to add your own Secure Sockets Layer (SSL) certificate to it.
    • In the private subnets:
      • An Auto Scaling group for Consul clients.
      • An Auto Scaling group for a Consul server cluster. You can choose to create 3, 5, or 7 servers.
      • Consul Template (the consul-template daemon) installed on all nodes for integrating applications with Consul’s service catalog and key/value store.
      • Dnsmasq installed on all nodes for integrating applications with Consul’s Domain Name System (DNS) interface for service discovery.

    * The template that deploys the Quick Start into an existing VPC skips the tasks marked by asterisks and prompts you for your existing VPC configuration.

  •  How to deploy
  • To build your HashiCorp Consul cluster on AWS, follow the instructions in the deployment guide. The deployment process includes these steps:

    1. If you don't already have an AWS account, sign up at
    2. Launch the Quick Start. Each deployment takes about 10 minutes. You can choose from two options:
    3. Access the Consul environment through the bastion hosts and SSH connections.
    4. Access the Consul web UI.
    5. Get started with Consul services.

    To customize your deployment, you can choose different instance types for your resources, and change the number of Consul client and server nodes.

    Amazon may share user-deployment information with the AWS Partner that collaborated with AWS on the Quick Start.  

  •  Cost and licenses
  • You are responsible for the cost of the AWS services used while running this Quick Start reference deployment. There is no additional cost for using the Quick Start.

    The AWS CloudFormation template for this Quick Start includes configuration parameters that you can customize. Some of these settings, such as instance type, will affect the cost of deployment. See the pricing pages for each AWS service you will be using for cost estimates.

    This Quick Start uses the open-source version of HashiCorp Consul, which doesn’t require a license.