Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

learn more… | top users | synonyms

0
votes
0answers
26 views

IAM policy for list, create and destroy instances and security groups

I need to create a IAM policy that allows a user to create/terminate instances and Security Group at specific VPC. Also I need that this user could list instances of this spsecidifc VPC. Is this ...
0
votes
1answer
39 views

VSFTP not working over VPN

I've had a FTP service running for some time using vsftp, working with passive mode with no problems. I've recently set up a VPN using openvpn, as far as I know I've configured everything correctly. ...
-1
votes
0answers
33 views

Cannot add host to a Network Load Balancing cluster [closed]

I'm trying to setup Network Load Balancing (NLB) with two nodes in Windows Server 2012. I've created two servers on Amazon EC2 from an existing image. I've created user accounts with administrator ...
0
votes
1answer
16 views

Amazon VPC NAT instance routing problems

I have an issue with routing. I have 2 public subnets: 172.31.1.0/24 and 172.31.100.0/24 In each of these I have a NAT instance. Each NAT instance is an OpenSwan VPN peer to a remote location. This ...
0
votes
1answer
13 views

AWS VPC: IPSEC VPN: Change the preshare — how?

Have read 50 pages of docs, and googled, and what is the answer? When you create a vpn in the VPC control panel, AWS generates the preshare. Fine. So after the consultant has the configuration ...
0
votes
1answer
72 views

AWS Override VPC DHCP - Additional Option Sets for RRAS VPN Clients

I am trying to run a RRAS VPN server that pulls from a windows DHCP server running on the same box. I am finding that the AWS DHCP is getting hit first with the DHCP request and it provides invalid ...
1
vote
1answer
38 views

Is it required to create a NAT instance in every availability zone of a VPC

I'm trying to figure out what are the best practices to setup a HA VPC The question relate to: What is the correct setup of a VPC that is spread all over the AZ of a region, with private and public ...
0
votes
1answer
33 views

Ec2 instance static private ip address

I am using an on-demand instance for testing some services in my spare time. So, I start and stop that instance very frequently, and I see its public and private IPs changing each time. This is ...
0
votes
0answers
68 views

Why can't I SSH to this AWS NAT instance in a public subnet?

For experimentation purposes, Iā€™m trying to setup an AWS EC2 inside a VPC that has both public and private subnets as described in this tutorial. However, when I try to SSH in step #2, it fails ...
1
vote
1answer
34 views

Can you setup multiple Public subnets on a single AWS VPC?

So here is our scenario, we currently have a production environment on AWS, we utilize an VPC, and use multiple EC2 servers that are all on this VPC. In order to create a development environment that ...
0
votes
0answers
62 views

Can we connect an OSX computer to an AWS VPC VPN?

We have a OSX computer we would like to connect to our AWS VPC. This OSX computer is on a network we do not control in a different physical location as the rest of our network. Using OSXs Networking ...
1
vote
0answers
24 views

Hudson proxy configuration on amazon EC2-VPC instance

I am using EC2 VPC instance. For Hudson installation of plugins, I hit the command java -jar Hudson.war --httpPort=8888 After this, I opened url http://127.0.0.1:8888 in instance's internet ...
0
votes
1answer
55 views

Setting up OpenVPN server: should I use tun or tap?

I'm trying to set up my first OpenVPN server, and I'm having trouble figuring out whether I should use tun or tap for my particular setup. I have an Amazon VPC with a few EC2 instances running ...
0
votes
1answer
47 views

What's the difference between a private and public subnet?

For the purposes of learning, I'm trying to setup a public/private VPC in AWS without using the wizard, and I'm trying to determine how AWS decides if a subnet is private/public. For argument sake, ...
0
votes
0answers
49 views

Amazon Web Services VPC ClassicLink feature in Cloudformation?

Does anybody know how to configure ClassicLink in a VPC in cloudformation? I'd rather not have to manually enable this every time I update a stack. The cloudformation documentation always seems to lag ...
1
vote
1answer
42 views

No public IP after stop/start Amzon EC2 intance

I have setup an AWS EC2 instance with a Elastic IP. Static IP and Elastic IP both works fine (shows default NGINX page). However when I STOP the instance and START back up, there is only a domain ...
1
vote
1answer
52 views

security group rules between EC2-classic and VPC server

We are currently using a set of Amazon EC2-classic servers for hosting our live and staging environments. We've got a couple of web servers and a background worker server in each environment. We've ...
0
votes
1answer
55 views

VPC public subnet internet access with ELB hooked up

I am attempting to set up a web server (nginx) that needs access to the internet while also being hooked up to an ELB but I am having trouble getting this solution working. Details: 3 public ...
0
votes
0answers
109 views

Set up pfSense on AWS VPC?

I am attempting to setup pfSense as a nat box for internal servers on a VPC. I have followed the guides posted for configuring access and have followed the AWS instructions for setting up and ...
0
votes
1answer
96 views

Unable to connect the Ubuntu EC2 instance to VPC LAN on AWS using secondary NIC adapter?

Infrastructure setup: VPC is created with 192.168.254.0/24 netwok Private subnet within VPC (Virtual Private Cloud) is created with 192.168.254.0/25 network Public subnet within the VPC is created ...
0
votes
0answers
95 views

Amazon VPC NAT performance problems

I have a set of servers inside an Amazon VPC, whose job is to get image files from S3 and process them. The S3 downloads would frequently stall, sometimes for over 2 minutes, but all would eventually ...
0
votes
1answer
141 views

How can two AWS VPCs using the same Customer Gateway for a VPN connection

If there are two vendors with seperate VPCs connecting to a single customer gateway for a VPN connection, what are possible configuration options to allow this? As it stands it seems that AWS only ...
0
votes
0answers
93 views

Amazon AWS Site-to-Site VPN doesn't allow concurrent pings

I have some strange behaviour with an AWS VPC site-to-site set up and would like some help to understand where my problem might be. Set Up I have a VPC with a private and public subnet, there is a ...
0
votes
1answer
51 views

Port 53 in Amazon Security Group

Everything works as expected. This question is for learning purposes only. Using Amazon Security Groups in a VPC. Outbound rules are: 0.0.0.0/0 Port 80 0.0.0.0/0 Port 443 Iptables allows OUTPUT ...
-2
votes
1answer
32 views

Why Use a NAT Instance? [closed]

Consider the following VPC: Public subnet with app servers and a separate NAT instance. Private subnet with database server. What benefits do we gain by using a stand alone NAT? EDIT: Why use ...
-2
votes
2answers
29 views

Could I have 2 nat on vpc [closed]

There is a vpc on amazon that has two subnets. The outer one has internet access and the inner one using NAT server to connect to internet. Inner subnet have plenty of servers for development and ...
0
votes
1answer
111 views

Connecting to multiple AWS VPCs via a single VPN connection

I'm looking at locking down an existing AWS setup. At the moment, everything is within a single default VPC (test, staging, production) and all within public subnets. My plan is to seperate the 3 ...
3
votes
1answer
184 views

Internet access from private VPC subnet?

My brain is a little bit fried trying to figure this out but I can't seem to get private subnets to connect to the internet to grab updates for example. Basically all I want is web access for these ...
3
votes
2answers
578 views

Amazon EC2 VPC: NAT instance download speed performance drop

I have a set of servers inside Amazon EC2 in VPC. Inside this VPC I have a private subnet and a public subnet. In the public subnet I have set up a NAT machine on a t2.micro instance that basically ...
1
vote
1answer
188 views

Connecting two AWS Regions: Why not use two Virtual Private Gateways?

I am attempting to connect two AWS regions. AWS's documentation suggests starting up an instance on both sides to run software IPSec (OpenSWAN or StrongSWAN), giving both instances an elastic IP and ...
1
vote
1answer
788 views

How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. So, there is a NAT server in public subnet which forward all ...
0
votes
0answers
38 views

Access ElasticCache Redis instance within VPC from a classic instance

I have an existing AWS EC2-Classic deployment that I am seeking to add a small Redis instance to. As this only needs to be a tiny Redis instance I elected to use the t2.small size. I've since found ...
0
votes
1answer
48 views

What name to use when communicating between AWS subnets

I've been googling this all day and can't quite figure it out. I'm trying to setup a multi-tier application in an AWS VPC, but I'm pretty a rookie at large system network architecture. I'm going to be ...
3
votes
1answer
77 views

What is the advantage of using a NAT plus private sub-net on AWS vs a public sub-net with locked down security groups and ACL?

My Scenario: I have an SQS queue with an auto-scaling group of EC2 workers processing messages from the queue into a database in a different region. Implied Networking Needs for EC2 Workers: Access ...
0
votes
0answers
175 views

AWS Elastic Beanstalk : Error creating an auto scaling group without vpc

I have the following error when I try to create a Node.js environment in Elastic Beanstalk : Creating Auto Scaling group named: awseb-e-neymbigw5a-stack-AWSEBAutoScalingGroup-1QX6LF04LAXUF failed ...
0
votes
0answers
37 views

Reach non existing AWS VPC subnet from IPSec tunnel

So here is my setup: VPC: 172.16.0.0/16 Subnet 1: 172.16.1.0/24 openvpn server: eth0: 172.16.1.10 tun0: 172.17.0.1 ovpn client 1: 172.17.0.6 ovpn client 2: 172.17.0.10 IPSec VPN is using ...
0
votes
2answers
480 views

Connecting an EC2 VPC with OpenVPN all routed traffic being lost

I'm trying to use OpenVPN on Amazon Linux to connect the local LAN to a VPC on EC2. I have traffic flowing from the OpenVPN instance to any machine on the LAN, but other machines on the VPC are not ...
2
votes
2answers
170 views

Trouble hitting EC2 AmazonProvidedDNS server over VPN

I have a VPC using the network 10.10.0.0/16, and a VPN server in the public subnet (10.10.0.0/24). The VPN uses addresses in the 10.11.254.0/24 range. When I connect to the VPN, I can access hosts in ...
1
vote
1answer
210 views

How can I enable outgoing HTTP/HTTPS requests on an EC2 in a public subnet within a VPC on Amazon AWS

I set up a VPC using scenario 2 from the AWS Docs: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html I've assigned an Elastic IP to an EC2 instance running in a Public Subnet. ...
0
votes
1answer
112 views

How to RDP securely to an EC2 instance?

I have a VPC with a few EC2 instances running Windows Server 2012 that will be used as workstations (in a similar way to WorkSpaces). Right now they are in a public subnet and users can connect using ...
0
votes
1answer
40 views

MySQL via SSL on VPC private subnet

Is an SSL connection recommended when connecting to a MySQL database server via a private subnet? SSL provides encryption but SSL causes a performance hit. The MySQL database server only serves ...
1
vote
2answers
58 views

how can I add/remove security groups on running ec2 instances which is not included in VPC?

I want to change the security group on running ec2 instance which is not included in VPC. I read that this is possible only if my instance is running in VPC. I tried to create a VPC and include my ...
0
votes
0answers
79 views

Limiting VPC access only to SNS confirmations

I have a setup with VPC populated with EC2 instances that have public IP addresses. They are needed mostly for the SNS subscriptions. While subscribing I have to provide a public URL where so called ...
0
votes
3answers
312 views

What is the recommended CIDR when creating VPC on AWS?

I have been creating AWS VPCs and I am wondering if there is a recommended CIDR value when creating VPCs. What are the factors that I must consider when choosing a CIDR and does the CIDR value affect ...
0
votes
0answers
66 views

How to use linux repository for setup (ubuntu) when box are in aws scenario 2 wizard created private subnet?

I know lots of questions and I have personally tried manual VPC creation multiple times until I gave to the wizard (NAT concept wouldn't stick). I thought the wizard would actually configure ...
0
votes
0answers
24 views

How to Reserved AWS VPC DB instance

I want to know how we can purchase Reserved Instance of RDS into VPC. In console their is no option to define the RI we are purchasing is in VPC like EC2. or simply I have to purchase the standard RI ...
0
votes
4answers
1k views

EC2 instances in VPC and access to the Internet

I am playing a bit with AWS. I created one VPC (with 10.1.0.0./24 net) and two EC2 instances attached to it. One EC2 has 10.1.0.4, second 10.1.0.5 . I allocated one Elastic IP to VPC and associated it ...
0
votes
0answers
191 views

Configuring VPC with Elastic Beanstalk

I followed the standard documentation for AWS, but I am unable to access the EB-created instances via SSH or get a healthy status check on them from the ELB. The relevant setup and security group ...
0
votes
1answer
696 views

Do ephemeral ports need to be open on the network firewall in order for nginx and sshd to work properly?

Preamble: So, before I actually ask the question, I'd like to point out that I'm somewhat apprehensive about posting this because even as I'm typing this out it it feels like I'm asking someone to ...
0
votes
1answer
37 views

Any way to set a private ip within vpc?

I've tried using the --private_ip_address but nothing. Anyone knows if there is an option to set up a specific ip address inside of a vpc? I don't want to setup an elastic one. I have a vpn connection ...