The tag has no wiki summary.

learn more… | top users | synonyms

-2
votes
1answer
26 views

Why Use a NAT Instance? [closed]

Consider the following VPC: Public subnet with app servers and a separate NAT instance. Private subnet with database server. What benefits do we gain by using a stand alone NAT? EDIT: Why use ...
-1
votes
0answers
18 views

Restrict access to one VPC in AWS

I am trying to restrict users to a single VPC. I went through Controlling Access to Amazon VPC Resources and came up with the following policy but it does not work. Can someone point out the errors in ...
3
votes
1answer
77 views

Internet access from private VPC subnet?

My brain is a little bit fried trying to figure this out but I can't seem to get private subnets to connect to the internet to grab updates for example. Basically all I want is web access for these ...
0
votes
0answers
30 views

Access ElasticCache Redis instance within VPC from a classic instance

I have an existing AWS EC2-Classic deployment that I am seeking to add a small Redis instance to. As this only needs to be a tiny Redis instance I elected to use the t2.small size. I've since found ...
0
votes
1answer
78 views

IPsec VPN Site-to-Site: Unable to reach hosts on same subnet as gateway

I am trying to bridge an office network with an Amazon VPC cloud network. So far everything seems to be working, except that I cannot reach servers on the same subnet as the cloud gateway. Office ...
-1
votes
3answers
69 views

Is it possible to configure inheritance for EC2 VPC Security Groups?

We'd like to be able to access the instances in our VPC from the various public IPs that we have in our corporate network. Is it possible to create security groups (like operator-security-group) and ...
0
votes
1answer
101 views

Connect to RDS inside a VPC using Opsworks located in another VPC

I have a RDS instance (mysql) inside a VPC called vpc-a (10.0.0.0/16). This instance is private, it can only be accessed from vpc-a. We created a stack on opsworks inside another VPC called vpc-b ...
-1
votes
1answer
161 views

Classic RDS from VPC EC2s

My old RDS instance is deployed in "Classic," not VPC. I have a new VPC with some EC2 instances in it, but I can't connect from these VPC EC2 instances to the RDS instance. Security Groups from ...
0
votes
2answers
123 views

Apache rejecting requests from remote hosts

I have set up Apache on Ubuntu 12.04 inside of an AWS VPC. The Apache server is in a private subnet accessible through a NAT. I am able to access Apache on port 80 as expected from the server itself ...
0
votes
1answer
89 views

AWS: VPC and NodeJS

I'm transitioning from a dedicated server to a VPC in AWS. It's a NodeJS application baed on ExpressJS. In the current implementation, I have NGINX + Passenger in front of the NodeJS application for ...
2
votes
1answer
172 views

Whitelist outbound traffic in VPC to changing IPs

I'm working with EC2 servers in a VPC where we'd like as little outbound traffic as possible, and for all outbound traffic to be explicitly whitelisted. However, based on EC2 security groups or ...
5
votes
2answers
410 views

Running docker in VPC and accessing container from another VPC machine

I'm having issues while running docker in AWS VPC. Here is my setup: I've got two machines running in VPC: 10.0.100.150 10.0.100.151 both having an elastic IPs assigned to them, both running in ...
2
votes
2answers
291 views

Amazon VPC Availability

We are trying to expand our reliability setup using VPC in us-west-1. The 'a' and 'b' AZs work fine, but when I try to create subnets on 'c' it just fails with the message: Value (us-west-1c) for ...
-1
votes
1answer
77 views

Dynamic Load balancer in public VPC outbound trouble

I'm trying to setup a Load Balancer within a VPC and am having trouble setting up outbound connectivity. I've seen lots of posts saying that I need to put the instances in a private subnet to let them ...
0
votes
1answer
49 views

Is it needed to use local DNS cacher in EC2 / VPC?

Seems like AWS internal DNS is already a very low latency one, e.g. On ec2 dig google.com | grep "Query time" ;; Query time: 0 msec So do we really need to use another DNS cacher?
0
votes
0answers
128 views

aws high latency in same VPC Zone

We are facing the connectivity latency issues between the instances. I have calculated the connection time between the two instances in the same VPC using the command time trace-route. Sometime the ...
0
votes
0answers
429 views

AWS VPC custom VIP: How to get a IP Address assumption to work across two EC2 VPC instances?

I created an AWS VPC and three instances therein (head, nodeA, and nodeB). I also associated them all with a security group that allows fully open networking among the private (RFC-1918) addresses ...
1
vote
0answers
50 views

AWS VPC public web application connecting to database via VPN

What I am trying to do is set up a web application that is public facing but makes calls to a database that is on an internal network. I have been trying to set up an AWS VPC with a public subnet, ...
2
votes
1answer
3k views

port forwarding through AWS VPC NAT

Yes, I have already scoured the internet and read most of the popular IPTables / DNAT guides / pages / posts. My Problem Summary I have a VPC with several subnets. One subnet in particular requires ...
0
votes
1answer
381 views

OpenVPN Setup with multiple AWS VPC Subnets

I have an OpenVPN server running on Ubuntu 12.04 in an AWS VPC with 3 subnets. I am able to connect my client and can ping the server (10.8.0.1) with no issues, however I cannot reach any other ...
1
vote
0answers
67 views

Is it worth setting up a private subnet in Amazon EC2 (VPC) [duplicate]

Amazon details how use a public + private subnet approach in VPC (http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html). But, bearing in mind that Instances don't have to have ...
1
vote
1answer
380 views

Failed to bring up eth1:1 when using secondary private IP on secondary network interface on VPC instance

I have created a VPC ec2 instance (t1.micro), in which I have two network interfaces, the primary eth0 and additional eth1. I was able to bring up the eth1 by editing the /etc/network/inteface auto ...
0
votes
2answers
273 views

OpenVPN Allow Servers to talk to VPN Clients

I have setup a VPC in Amazon with 2 subnets. The public subnet has a ip range of 10.0.0.XXX and a private subnet with a ip range of 10.0.1.XXX my OpenVPN sits on 10.0.0.100 and hands out ip from the ...
1
vote
1answer
631 views

AWS VPC ELB vs. Custom Load Balancing

So I'm wondering if this is a good idea. I have a Amazon AWS VPC setup with a public and private subnets. So I all ready get the Internet Gateway and NAT. I was going to setup all my web servers ...
0
votes
1answer
444 views

Routing issue with multiple IP addresses on EC2 (VPC) host

We run a EC2 Ubuntu server acting as a STUN server for the NAT Traversal mechanism in my company's application. By the nature of the STUN protocol the server needs two IP public addresses. We hired ...
2
votes
1answer
540 views

Second ENI in AWS VPC is not accessible on Ubuntu instance

I'm just getting into VPC, trying to understand how everything works. So far the biggest hurdle I've run into is that any time I add a second Elastic NIC to a machine, that second IP is not accessible ...
0
votes
1answer
765 views

iptables redirect UDP packet to multiple destinations [duplicate]

Possible Duplicate: How to Tee udp packets onto a different host I'm running some instances in Amazon's Virtual Private Cloud. One instance is inside a VPN only subnet (10.128.1.0/24) ...
0
votes
2answers
574 views

NAT and NGINX on the same server

I'm setting up a VPC cluster for my collaborative todo list application www.getdoneapp.com. To have my servers on the private network I need a NAT server so my servers on the private network can ...
0
votes
2answers
9k views

Acronis TrueImage .TIB file conversion to .VHD

I've made several backups of older 2000 and XP machines I've phased out over the last year or so. These were done with 'Seagate DiskWizard' from Hiren's Boot CD (Acronis True Image Home (v9.5 I ...
1
vote
1answer
390 views

Multiple External IP Addresses, Two Routers & Amazon VPC

I'm out of my depth here as I'm a database developer trying to do network stuff and really need some help. We have a leased line with multiple external IP addresses (subnet mask 255.255.255.248). ...
13
votes
3answers
9k views

Internal DNS inside Amazon AWS VPC

I am getting started on understanding VPC but am not seeing a good internal DNS solution. For example, we're using a non-RDS database server which other servers in the VPC connect to. I would like ...
2
votes
1answer
316 views

Amazon AWS: SSL in our testing environment

My company has a running business web service on AWS which uses a wildcard SSL certificate (works for *.example.com). Multiple partners have subdomains and need SSL (https://partner1.example.com, ...
0
votes
1answer
106 views

How to combine AWS and dedicated external servers?

I have an extensive network of servers all currently hosted on AWS EC2. For reasons of cost I plan to gradually migrate to dedicated servers where possible. So: How can I best combine AWS and ...
4
votes
1answer
540 views

Amazon AWS VPC Performance Advantages

We have a simple setup that consists of... 1 EC Instance for HTTP/PHP requests 1 RDS Instance for our Database requests Currently our two servers do not use VPC to communicate. I was wondering if ...
0
votes
2answers
1k views

Amazon VPC - Elastic load balancer not forwaring requests to Private Subnet instance

I have setup and Elastic load balancer in VPC. There is a public and private subnet. Currently the web server is in the Private subnet and there is a NAT instance in public subnet, from which the web ...
0
votes
1answer
742 views

Amazon VPC unable to access internet from private subnet

I have setup an Amazon Public+Private subnet VPC. There are two instances in public subnet: Amazon Nat instance OpenVPN Access Server I am able to setup VPN to the internal private subnet ...
5
votes
1answer
1k views

How do you get AWS VPC EC2 instances to be able to see the AWS APIs?

We're spinning up infrastructure inside of an AWS VPC via CloudFormation. We're using auto-scaling groups to bring up VPC-EC2 instances (so, we don't bring up instances directly; ASGs manage that). ...
1
vote
2answers
1k views

What back-end hardware or software do Amazon Web Services use to provide the VPN functionality for their VPCs? [closed]

When connecting an customer gateway to a VPC VPN, what hardware or software is providing the service on Amazon's side?
3
votes
3answers
1k views

Advice regarding resilient internet access from within an Amazon VPC

We've had our NAT server fail 3 times thus far - once due to an issue with it's EIP and twice due to it's host being CPU bound. While I understand these things happen, we can't afford to keep taking ...
0
votes
1answer
460 views

Securing EC2 machines with VPC + a VPN?

Right now, my company is pre-launch and is getting away with a few dirty hacks. The biggest one is that our staging, ci, and monitoring boxes are available at staging.ourcompany.com, ...
2
votes
1answer
3k views

Can you connect to Amazon VPC VPN from Windows 7 without a hardware VPN on your end?

I found this thread that seems to suggest it's not possible to connect to Amazon VPC VPN from a Windows 7 box without an external hardware (router) on the client side. Is this true, or did I miss ...
0
votes
1answer
45 views

Installing Windows Web Server 2008 on VPC 2007 Host OS - Windows 7 SP1

I'm running into an error when I try to install Windows Web Server 2008 x86 on a VPC I created with VPC 2007. Shortly after I enter the product key in the installation wizard it displays an error ...
0
votes
1answer
1k views

Does AWS not allow outbound SSH connections?

I was wondering if Amazon Web Services disallows outbound SSH connections from public facing EC2 instances? I have an SSH Bastion on a public subnet with an Elastic IP setup to where I can can ...
4
votes
1answer
2k views

How do you get Redis connections working within an Amazon VPC private subnet?

I have an Amazon VPC setup with a private subnet containing 2 instances. One of them has redis running on it, the other instance I want to use to connect to the redis server. I have the redis instance ...
1
vote
2answers
4k views

Amazon VPC NAT not working

I'm trying to create a NAT instance for my VPC to allow instances on private subnets connect to the internet (most importantly, S3). I tried following the instructions here: ...
1
vote
2answers
2k views

Network speed between 2 EC2 instances in VPC

I setup a vpc and launched 3 EC2 instances all in 10.0.0.0/16 subnet. I am wondering how these instances connected to each other, 100mbit, 1000mbit?
1
vote
1answer
3k views

How do I authorize connections to non-VPC EC2 instances from the instances in a VPC via the igw-xxxx Internet Gateway?

I've got many ec2 instances and recently added a Virtual Private Cloud at amazon too. On the VPC subnet 10.0.0.0/8 the host 10.0.0.88 can reach the internet at large through an Internet Gateway ...
4
votes
1answer
2k views

Issue routing openswan vpn traffic beyond the server

Trying to set up a openswan based server sitting in an Amazon VPC cluster. The goal is to make it so we can VPN into VPC and have our workstations be as if they were on the network, more of a ...
1
vote
1answer
2k views

IPSec VPN between Amazon VPC and a Watchguard XTM?

I have a branch office behind a Watchguard XTM that needs VPN into an EC2 VPC. I am unfamiliar with Watchguard and am unable to find all of the knobs and dials in the flash admin interface to bring it ...
4
votes
1answer
3k views

Simplest possible VPN to Amazon EC2 instance

I have setup an EC2 instance (Windows Server 2008) that I will let different developers connect to. Since I want the connection to be secure I am trying to setup a VPN connection to that machine, but ...