reference deployment

HashiCorp Consul on Amazon EKS

A networking and service mesh to discover, connect, and secure services on Amazon EKS

This Quick Start sets up a flexible, scalable Amazon Web Services (AWS) Cloud environment on Amazon Elastic Kubernetes Service (Amazon EKS). It uses HashiCorp Consul Helm to launch HashiCorp Consul into the configuration of your choice.

HashiCorp Consul is a tool that provides cloud networking automation by using a central shared registry for service-based networking.


This Quick Start was developed by HashiCorp, Inc. in partnership with AWS. HashiCorp is an AWS Partner.

  •  What you'll build
  •  How to deploy
  •  Cost and licenses
  •  What you'll build
  • Use this Quick Start to set up the following HashiCorp EKS Consul environment on AWS. Note that this module is based on the Modular and Scalable Amazon EKS Architecture Quick Start.

    • A highly available architecture that spans three Availability Zones.*
    • A virtual private cloud (VPC) configured with public and private subnets according to AWS best practices, to provide you with your own virtual network on AWS.*
    • In the public subnets:
      • Managed network address translation (NAT) gateways to allow outbound internet access for resources in the private subnets.*
    • In one public subnet:
      • A Linux bastion host in an Auto Scaling group to allow inbound Secure Shell (SSH) access to Amazon Elastic Compute Cloud (Amazon EC2) instances in private subnets. The bastion host is also configured with the Kubernetes kubectl command line interface for managing the Kubernetes cluster.
    • In the private subnets:
      • A group of Kubernetes nodes.
    • An Amazon EKS cluster, which provides the Kubernetes control plane.

    * The template that deploys the Quick Start into an existing VPC skips the tasks marked by asterisks and prompts you for your existing VPC configuration.

  •  How to deploy
  • To build a HashiCorp EKS Consul cluster on AWS, follow the instructions in the deployment guide. The deployment process takes about 1.5 hours and includes these steps:

    1. If you don't already have an AWS account, sign up at
    2. Launch the Quick Start.
    3. Access the Consul environment through the bastion hosts and SSH connections.
    4. Access the Consul web UI.
    5. Get started with Consul services.

    To customize your deployment, you can choose different instance types for your resources, and change the number of Consul client and server nodes.

    Amazon may share user-deployment information with the AWS Partner that collaborated with AWS on the Quick Start.  

  •  Cost and licenses
  • You are responsible for the cost of the AWS services used while running this Quick Start reference deployment. There is no additional cost for using the Quick Start.

    The AWS CloudFormation template for this Quick Start includes configuration parameters that you can customize. Some of these settings, such as instance type, will affect the cost of deployment. See the pricing pages for each AWS service you will be using for cost estimates.

    This Quick Start uses the open-source version of HashiCorp Consul, which doesn’t require a license.