Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Filter by
Sorted by
Tagged with
1 vote
1 answer
880 views

aws ec2: ipip tunnel between instances via public ip addresses

Can anyone kindly tell me that it's possible or not in the first place? Suppose: There are two ec2 instances In one aws account/vpc. In different subnets/available zones each other. Runnig on ...
Takao IIZUKA's user avatar
0 votes
2 answers
2k views

Unable to ping vpn clients from target subnet

I'm using AWS vpn endpoint to connect vpn clients to a subnet: I am able to ping an ec2 instance on cidr 10.0.0.0/16 when connected using the vpn endpoint. However that ec2 instance is unable to ping ...
Zachscs's user avatar
  • 103
1 vote
0 answers
190 views

Forwarding mDNS packets from an on-prem network to cloud server and back

Problem Statement : We have an application running on an on-prem Linux server configured with a trunk port and its working is tightly associated to multiple VLANs traffic and certain device IPs ...
achilles's user avatar
  • 111
4 votes
1 answer
5k views

Cannot ping between EC2 instances in peered VPCs

I am trying to setup a barebones VPC connection within the same AWS account. VPC-A and Subnet-A have CIDR: 10.200.1.0/24 VPC-B and Subnet-B have CIDR: 10.200.2.0/24 Each VPC contains one EC2 ...
James Wierzba's user avatar
0 votes
2 answers
429 views

What is the point of VPC if instance requires public ip?

I created ec2 instances in a public subnet (auto created with vpc wizard), and realized that some of them are not able to access internet. I learned that reason behind it is they don't have public ip ...
Mohamed's user avatar
  • 119
4 votes
1 answer
1k views

AWS: Outbound only connectivity from a private subnet

I'm sure this question was asked before and there a number of documentations from AWS but it seems not working for me. But cannot find a straight answer to my question, so asking here again. I have a ...
MacUsers's user avatar
  • 479
15 votes
3 answers
8k views

Working around an AWS network ACL rule limit

At a maximum, a VPC network ACL can have 40 rules applied. I have a list of over 50 IP addresses that I need to explicitly block access to in our systems, over any port and any protocol. This is an ...
emmdee's user avatar
  • 2,267
0 votes
1 answer
150 views

Verizon VPN to AWS VPC

I was wondering if Verizon can terminate their VPN to AWS VPC ? Our existing setup has Cisco Router (CSR1000V) running on EC2 instance and Verizon VPN is terminated on the public IP of the EC2 ...
rp346's user avatar
  • 131
0 votes
2 answers
105 views

Benefits of private VPC with NAT versus public VPC with firewall rules (in AWS)

Imagine you have some EC2 servers which are fronted by a load balancer (ELB). Say they're in a public VPC - i.e. each EC2 instance has a public IP address and each instance is firewalled using ...
John's user avatar
  • 149
2 votes
1 answer
284 views

AWS IPSec VPN Server

I've setup a EC2 instance within my VPC which I use to run a IPSec VPN server using libreswan. I'm able to connect to the VPN server from windows, but once I do so I'm unable to access other EC2 ...
Jyo Jena's user avatar
3 votes
2 answers
2k views

AWS VPC: Internet Gateway vs NAT

This and this and this are quite related to my question. Although it seems to have answered quite a lot of people's doubts, I am still struggling to understand if this setup is specific to AWS or in ...
Sheel Pancholi's user avatar
4 votes
1 answer
149 views

AWS cloud architecture

I'm trying to figure out how to deploy my applications on AWS. I have very limited DevOps experience and I'm not sure if my design is good. I have two application, a web application that handles ...
cmar's user avatar
  • 43
1 vote
1 answer
1k views

AWS route table point default to network interface in a different subnet

I'm trying to setup an EC2 instance as NAT gateway of sorts that other instances in a private network will be routed to. I have a following setup: VPC 10.0.0.0/16 2 subnets A: 10.0.1.0/24 B: 10.0....
Michal Artazov's user avatar
7 votes
1 answer
4k views

How to configure cross region VPC peering on AWS with Terraform

I'm trying to create a terraform configuration to spin up multiple VPCs in different regions and create VPC peer connections between them. This is my module for the VPC # Required Variables ...
rvabdn's user avatar
  • 245
5 votes
1 answer
2k views

AWS: Getting a server to pickup changes to VPC DHCP options

I have an AWS VPC that by mistake had the default DHCP option set cleared. As a result I have a handful of servers that have the wrong (unresolvable) hostnames and missing settings in /etc/resolv.conf....
herbrandson's user avatar
6 votes
1 answer
7k views

Connecting to SMTP server from AWS Lambda

On my AWS Lambda function, my javascript code times out whenever I try to use nodemailer to connect to my Amazon SES SMTP server (port 465). However, if I run the script locally, it works fine, which ...
user avatar
0 votes
3 answers
1k views

Can't access EC2 instance, but not NLB in other VPC

I've recently started the process of switching from AWS ELB to NLB, and I'm facing some connectivity issues. We have 2 VPCs. In VPC1, both EC2 database servers, old ELB and NLB is located. In VPC2, ...
Simon Fredsted's user avatar
1 vote
3 answers
10k views

EC2 unable to ping google.com

We created new VPC that has four subnets, two private and two public. Private and public will be Mumbai A Mumbai B region. When I ping google.com from public Mumbai A it is not working. When I ping ...
gokul kandasamy's user avatar
0 votes
1 answer
324 views

AWS Lambda needs to be moved in different Subnet

I have a Lambda function that is in VPC-A and Subnet 1A and 2A. I want to move it to Subnet 1b and 2B. The command below is giving error: aws rds modify-db-subnet-group --db-subnet-group-name "XXXX" ...
Kumar's user avatar
  • 3
0 votes
1 answer
167 views

Connecting two AWS VPCs in different regions

I have 2 VPC's in different regions (Virginia and Ohio) They both have IP ranges of: 172.31.0.0/16 Do I need to change the IP ranges of one region? How would I do that if I already have servers ...
Chris Muench's user avatar
0 votes
1 answer
129 views

AWS - EC2 : How to use a different public address for outbound connections [closed]

I have an AWS Ubuntu EC2 instance with an elastic IP address assigned to it and running a web application. I would like to run a web scraping script on my server and I do not prefer my server / ...
Tolga's user avatar
  • 205
1 vote
0 answers
315 views

AWS VPC EC2 Setting AD DNS Custom DNS for instance running in another VPC

Here is my scenario: 1. I have two peered VPCs VPC1 which is running Active Directory integrated DNS Service with my domain as example.local. There is another VPC2 which has both VPC DNS with ...
anu11may's user avatar
1 vote
1 answer
41 views

User assigned IAM Admin role cannot see VPCs

In AWS, I created a user and gave this user AdministratorAcess permissions. The way I understand it, this user can do everything the root administrator can: clicking on the AdministratorAccess ...
EastsideDev's user avatar
1 vote
0 answers
295 views

How to route traffic from VPC to another by following set of constraints in AWS

Here I have the scenario shown in the figure below, in which there are 3 VPCs. Each VPC hosts 1 VM and CSR 1000v, except VPC2 where there is only CSR. CSRs of both VPCs are able to communicate with ...
Khalil Mebarkia's user avatar
3 votes
1 answer
3k views

CodeBuild behind VPC can't access CloudWatch endpoint

I have a CodeBuild project that is setup to use a VPC so it can access RDS. I setup a "VPC Endpoint" for com.amazonaws.us-east-1.s3 so CodeBuild can access CodePipeline output artifacts. This is ...
twiz's user avatar
  • 295
0 votes
1 answer
816 views

How to do Static routing EC2 linux-based VM and CSR 1000v

I'm having the following. In VPC 1, there are CSR 1000v and EC2 linux-based VM. I would like to do static route in order that VM1 and CSR could connect to each other. I'm allowing all ICMP traffic ...
Khalil Mebarkia's user avatar
9 votes
3 answers
12k views

CodeBuild with VPC settings fails to download CodeCommit source

I originally had a simple CodePipeline setup triggered by commits to a CodeCommit repo, with a "Stage" that output the source code as an artifact and another "Stage" using CodeBuild to run some code ...
twiz's user avatar
  • 295
2 votes
2 answers
255 views

Aws routing table - Static routing

Amidst configuration of AWS routing table, AWS console allow static routing only. As mentioned here, every VPC has an implicit router. Assuming there is a public and private subnet configured ...
user1787812's user avatar
13 votes
1 answer
3k views

AWS NAT vs AWS IGW vs AWS Router

As per this answer, router and gateway are same devices, in terms of functionality. In AWS world, we have internet gateway, NAT gateway and router Are these three not the same?
user1787812's user avatar
9 votes
2 answers
6k views

How to pick AWS CIDR within the CIDR ranges of VPC?

When i try to add a new subnet in my VPC I get this message: 172.22.128.0/24 CIDR is not within the CIDR ranges of VPC. My current VPC CIDR is 172.22.130.0/28 Any help?
omar jalloh's user avatar
1 vote
1 answer
595 views

How to assign a private IP dynamically generated with AWS Cloudformation?

I have an AWS Cloudformation, and I want two EC2 instances A and B on a private subnet under the same VPC. In the application, I need A to access B. How can I configure A with the dynamically ...
oleiba's user avatar
  • 121
1 vote
1 answer
1k views

AWS Security group for restricting inbound traffic from private subnet

I have a load balancer with public IP, which delegates calls to two EC2 web servers on a private subnet in AWS VPC. For redundancy reasons, each on a separate private subnet. Let them be denoted as A1,...
oleiba's user avatar
  • 121
1 vote
1 answer
222 views

Can not ping interface's public address of my instances

I have basically 2 VPCs where CSR 1000v is deployed in each VPC (CSR1 and CSR2). I attach a drawing my setup below. I created 2 interfaces in deferent subnets within its VPC CIDR in each VM and ...
Khalil Mebarkia's user avatar
1 vote
3 answers
3k views

Public and private subnet in VPC

IANA established certain blocks of IP as private IP range(shown below) 10.0.0.0 – 10.255.255.255 (255.0.0.0) 172.16.0.0 – 172.31.255.255 (255.255.0.0) 192.168.0.0 – 192.168.255.255 (...
overexchange's user avatar
1 vote
2 answers
1k views

How can I list private zones associated with a VPC that are hosted in another account?

I can use a set of AWS API commands to associate a VPC with a private zone hosted in another account. That way, name resolution works in the VPC even for the zones that are defined elsewhere. Here'...
arnuschky's user avatar
  • 418
11 votes
1 answer
11k views

Does RDS in private subnet inside AWS VPC need a NAT instance/gateway?

I have hosted an AWS RDS inside the private subnet of the VPC. While creating the VPC with public and private subnets, I had to create a NAT instance. I know NAT instance is mainly for private ...
Neron Joseph's user avatar
2 votes
1 answer
770 views

How to Virtual static routing in CSR 1000v on AWS?

I'm trying to do static routing for 2 Cisco CSR 1000v routers which are deployed on 3 VMs in AWS, but it didn't work. I configured correctly 2 interfaces of both routers, but when I tried to ping the ...
Khalil Mebarkia's user avatar
2 votes
1 answer
1k views

How to add a physical connections to Cisco CSR 1000 in AWS?

I deployed 2 Cisco CSR 1000 routers in one VPC-1 at a region A, and at region B I deployed another one. I would like to make a physical connection between these 3 routers. Also, I tried to ping ...
Khalil Mebarkia's user avatar
3 votes
2 answers
2k views

Cannot Git Pull From Inside AWS Private Subnet

I am using two public subnets in two availability zones, and then two private subnets in those same availability zones. I have an elastic load balancer that forwards traffic to my EC2 instances in the ...
lorenzo's user avatar
  • 31
0 votes
1 answer
1k views

Laravel Forge: Unable to create AWS EC2 instance in London Region

When I try to create a server on Laravel Forge for AWS in the London region I get the following error message: Whoops! There were some problems with your input. The server provider was unable ...
Zander Rootman's user avatar
6 votes
2 answers
10k views

AWS: reduce nat gateway costs for a small system

I am setting up infrastructure for a startup which pretty much will not have a lot of traffic, but should be able to scale when needed. We are favouring a setup with a LB, that distributes traffic ...
st-h's user avatar
  • 257
0 votes
3 answers
792 views

What happens if the private IP range of a VPC falls outside the IANA defined ones?

The VPC documentation says: When you create a VPC, we recommend that you specify a CIDR block (of /16 or smaller) from the private IPv4 address ranges as specified in RFC 1918: 10.0.0.0 - 10.255.255....
snetch's user avatar
  • 123
8 votes
1 answer
8k views

IP Address exhaustion for lambdas in VPC

I am currently part of a group that is dealing with the repercussions of deploying 300+ AWS Lambda functions running Node.js in place of a more traditional REST API. I recently implemented an ...
SirCapsLock's user avatar
2 votes
1 answer
4k views

How to get AWS public IP CIDR range of a VPC

I have a VPC running on AWS which was created using kops, and the databases are running on mongo-atlas using GCP as a cloud provider. The mongo database servers are open to the world, what I'm trying ...
gagan trivedi's user avatar
3 votes
1 answer
4k views

An Issue with an AWS EC2 instance when connecting it to WebSocket

As I tried to run the chat app from localhost connected to MySQL database which had been coded with PHP via WebSocket it was successful. Also when I tried to run from the PuTTY terminal logged into ...
Nɪsʜᴀɴᴛʜ ॐ's user avatar
3 votes
1 answer
580 views

What is a good subnet strategy for AWS VPC? [closed]

I currently have each VPC per cluster (stg, prd, tst, misc) and the standard clusters (stg, prd) have these subnets: elb: for public elb(s) that will received direct public traffic elb-int: for ...
tu4n's user avatar
  • 131
4 votes
1 answer
834 views

AWS lambda fails to access internet, despite having proper IGW, NAT and routing table entries?

I am experimenting with AWS Lambda, with a small piece of code that would fetch some files from S3. Unfortunately I cannot even access internet resources when I put my Lambda function into a VPC, ...
Peter G. Horvath's user avatar
1 vote
1 answer
436 views

NAT setup on AWS

This might sound ridiculous for some, but am trying to setup NAT on lightsail so that I can access my private ec2 instances which are connected using VPC peering. Suppose if 172.31.x.x is my ...
Hari Aakash's user avatar
0 votes
2 answers
408 views

AWS Instance accept connection from VPN in same VPC [closed]

I did setup an OpenVPN server, which works fine and the IP of the server shows instead of my machine's IP. I am using this VPN to connect to EC2 instance, and restricting access to only instances ...
MZaza's user avatar
  • 51
0 votes
2 answers
134 views

AWS VPC : Enable public access for application(s) running on private ip addresses

We have a few Couchbase databases running on EC2 instance(s) running within a AWS VPC. Our apps are on a different VPC. The app layer talks to the Database via VPC peering. Couchbase provides a web ...
var's user avatar
  • 1

1
3 4
5
6 7
16