Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an extensive network of servers all currently hosted on AWS EC2.

For reasons of cost I plan to gradually migrate to dedicated servers where possible.

So: How can I best combine AWS and non-AWS servers in my network?

Ideally, I should be able to assign internal IP addresses to the external servers, include them in AWS security groups and ensure that all private traffic between my AWS servers and external servers is secure.

share|improve this question
up vote 1 down vote accepted

To accomplish this, you will need to use the Hardware VPN feature of Amazon Virtual Private Cloud, where the VPN is connected to your new non-Amazon servers. See Amazon's documentation on setting this up.

share|improve this answer

Depending on what communication you need between the AWS servers and the non-AWS servers, you might be able to get by with just using communication tools that are secure on their own, such as ssh, in which case, the only thing you need is a key distribution system and your own rules about which machine can connect to which other machine.

I use this method with a home-grown system to configure ssh. Each machine has one private ssh key. My configuration machine (my desktop) has all the public keys and can ssh to all other machines. It generates ~/.ssh/authorized_keys and ~/.ssh/config files for all other machines and can update them as needed.

For example, I have non-AWS servers that I use for various things, but I also have an AWS server that I use for backup and some other uses. The backup is done with rsync, which uses ssh, so I consider it as secure as any other solution.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.