Monday, June 26, 2017

AWS : VPC : VPC Peering

What is VPC Peering ?
A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses. Instances in either VPC can communicate with each other as if they are within the same network.

AWS uses  existing infrastructure to create this , its neither a gateway nor a VPN connection nor a separate piece of hardware,

Can i create VPC connection within different account ?
Yes , You can create a VPC peering connection between your own VPCs, or with a VPC in another AWS account.

Can i create VPC connection in different region ?
Documentation says no , In both cases, the VPCs must be in the same region.


after creating this the Status will be "pending acceptance"
so someone from other VPC need to accept the connection.

Debugging
If after creating a connection still it doesnt work, then
  1. You may need to correct the route table entries.
  2. Check NACL entries allow rules
  3. Verify the Security Groups allow the traffic.
  4. Also check firewall rules
From FAQs
Ques. Can Amazon EC2 instances within a VPC in one region communicate with Amazon EC2 instances within a VPC in another region?
Ans : Yes, they can communicate using public IP addresses, NAT gateway, NAT instances, VPN connections, or Direct Connect connections.  
Note : didnt say VPC Peering.

No comments: