Questions tagged [amazon-vpc]
Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define
744
questions
0
votes
0
answers
16
views
AWS AppStream is unable to push session script logs to s3
I have configured session scripts to log stdout and stderr to s3 bucket as described in https://docs.aws.amazon.com/appstream2/latest/developerguide/use-session-scripts.html#enable-S3-bucket-storage-...
- 1
0
votes
0
answers
15
views
Elastic Beanstalk deploy app in private VPC without public ip address for EC2
I'm currently developing a NodeJS application that I want to deploy in Elastic Beanstalk (EBS). To isolate & secure my cloud resources I'm using VPCs where I deploy the EBS app and also my ...
2
votes
2
answers
52
views
Why is my Google Cloud Function timing out when making a HTTP request to my AWS Fargate instance?
I am working on a Google cloud function for beforeSignIn trigger which needs to fetch some data from a microservice hosted on a AWS Fargate instance. The request times out but only in the Google cloud ...
- 31
0
votes
1
answer
20
views
AWS: routing back from VPC to an instance
I'm relatively new to AWS and need to set up some internal infrastructure. Example: a VPN server that routes people into a VPC.
I have a VPN server instance bound to an elastic IP that has a subnet ...
- 3
0
votes
1
answer
56
views
AWS cannot connect to any T3 instance, vpc config valid (I think)
I created a new VPC ca-central. I followed the same procedure as everywhere else:
New VPC (this created acl which is wide open)
three subnets, one for each availabiltiy zone, CIDR spaced out properly
...
- 141
0
votes
0
answers
33
views
Setting up HA NAT instances on AWS
Question: Anyone have experience running HA NAT instances and how to set them up? Basically, I would need to have my own NAT instances with automatic failover in case something breaks. I've ran years ...
- 121
0
votes
0
answers
34
views
AWS EC2: adding IP from a separate private block
I have an existing VPC with a CIDR in the 10.0.0.0/16 block.
I now have to create a VPN connection to an external service, who want us to use IPs in 192.168.0.0/16 block.
Unfortunately, AWS does not ...
0
votes
0
answers
10
views
No response from EC2 AmazonProvidedDNS server over Site-toSite VPN
I have a VPC using the network 10.10.1.0/24, and a Site-to-Site VPN connection to my local subnet (192.168.1.0/24). The VPN uses addresses in the 10.11.254.0/24 range. When I connect to the VPN, I can ...
- 307
0
votes
1
answer
58
views
OpenVPN on AWS (works in NAT mode but doesn't work in Routing mode)
I have a brand new VPC (10.0.0.0/16) with 3 public subnets (pointing to an IGW) and 3 private subnets (with a NAT GW in each). I have deployed an OpenVPN appliance in the public subnet and configured ...
- 456
0
votes
0
answers
73
views
AWS: Ping between multiple namespaces in seperated EC2 Instance
I am encountering an issue where I am unable to receive a response when attempting to ping from a namespace located within a public EC2 instance to a private one. To better illustrate my situation, I ...
- 101
0
votes
0
answers
103
views
How to configure shared VPC for kOps?
As described in this documentation, I want to create a Kubernetes cluster using kOps in an existing VPC. I have created a VPC, Internet Gateway, Route Table, Subnet and an EC2 instance which I want to ...
- 101
0
votes
0
answers
587
views
How to create EKS cluster with VPC CNI addon via CloudFormation?
I create a EKS cluster (1.24) via cloudformation, it works fine without a CNI plugin but fails when I add vpc-cni addon:
AddonCNI:
Type: 'AWS::EKS::Addon'
Properties:
AddonName: vpc-...
- 233
0
votes
1
answer
118
views
Seamless switch from NAT GATEWAY to VPC gateway
My team is currently burdened by the NAT Gateway costs and we would like to switch over to VPC Gateway endpoint to reduce the costs associated with all the EC2-S3 communication.
at the same time,
We ...
- 1
0
votes
0
answers
48
views
VPC network interfaces - hot, warm and cold attach
According to Best practices for configuring network interfaces guide, there are three ways to attach a network interface to an instance:
You can attach a network interface to an instance when:
it's ...
-1
votes
1
answer
19
views
Can I connect two vpc's with one site to site vpn in same region?
I currently have one site to site vpn connected to one vpc.
I want to add a vpc here(It's the same region),
but I want to connect the on-premise network connected through site to site vpn through site ...
1
vote
0
answers
97
views
which ECS task network mode?
I have an Application Load Balancer in a private subnet (used by API Gateway) that targets an ECS task. I want that task to only be accessible from inside the VPC, not from the internet, but I do have ...
- 11
0
votes
0
answers
130
views
Configure AWS VPN with security rules for internal load balancer
currently we have an AWS client vpn setup to give users access to our VPC. We are using active directory groups to allow certain users access to ip ranges. However, we would like to allow some users ...
- 111
1
vote
2
answers
408
views
AWS security group cross regions
I am trying to set a security group A to allow SSH access from security group B in a different region. I don't have much experience with networking in general and AWS networking.
Followed the ...
- 179
0
votes
1
answer
2k
views
Why does an S3 to S3 copy care about VPCs? Related to error: "VPC endpoints do not support cross-region requests."
Goal: Get files
from Bucket 1 in ca-central-1 in Account A
to Bucket 2 in us-east-1 in Account B
using the AWS CLI from a third machine using an the IAM role with correct S3 read and write ...
- 103
1
vote
0
answers
120
views
Linux instance vs Windows instance - different behaviour in an AWS private subnet routing traffic through a NAT
I'm experimenting with a NAT gateway vs a Squid proxy in an EC2 instance (both of these placed in the same public subnet). To test connectivity, I'm using a private subnet to access the internet (once ...
- 121
0
votes
0
answers
488
views
Can't ping or traceroute through EC2 using AWS Site-to-Site VPN to Cisco ASA
My VPC is connected to Cisco ASA, tunnel is shown to be UP in the AWS console.
What is working:
The engineer on the Cisco side has successfully pinged my EC2
instance within my private 10.5.0.0/17 ...
- 101
1
vote
1
answer
120
views
Is it necessary to put public and private subnet in different vpc for extra safety
Currently we put public accessible resources like ALB inside public subnet, application servers and data storages inside private subnet (different data storage, say RDS and Elasticache, have their own ...
- 111
0
votes
0
answers
115
views
Migrating a Simple EC2-Classic setup to VPC - use AWS MGN?
I have a client that needs to get an app off EC2-Classic and over to a VPC in the next few days because EC2-Classic is being retired on August 15, 2022.
It is a simple app with 2 Classic EC2 Instances,...
- 193
0
votes
1
answer
71
views
Move an Elastic IP from a VPC to Classic EC2
I know it is possible to "Move to VPC Scope", but is it also possible to move back from VPC to Classic EC2?
- 193
0
votes
1
answer
255
views
Creating Subnet IP address : IPv4 block sizes must be between a /16 netmask and /28 netmask
I'm new to AWS and I'm looking to create a subnet. Whenever I try the defaults subnets under I get either the error message "IPv4 block sizes must be between a /16 netmask and /28 netmask." ...
0
votes
0
answers
63
views
how to make VPC Endpoint public
I have two VPCs.
VPC-A has an endpoint service and VPC-B has VPC endpoint to that service. I also want to access this private endpoint in VPC-B publicly.
Can you please help me with the ways.
- 25
1
vote
1
answer
400
views
AWS PrivateLink connection with HTTPS
I have two VPCs, a consumer VPC and a service VPC. Consumer application HAS to access the service via AWS PrivateLink and it HAS to be an HTTPS call. Here is my current setup, which works:
Note that ...
- 111
0
votes
0
answers
65
views
AWS: Classic RDS to VPC resulted in high CPU
We are running a single 5.7 MySQL Database
for couple of years using Amazon AWS RDS service.
3 days ago we moved our server from a Classic RDS into a VPC (no other action was done).
The load on our ...
0
votes
1
answer
132
views
NAT Gateway breaks incoming traffic for instances in public subnet
I have Elastic Beanstalk instances accessible through an ALB in public subnets and want to assign them a single IP address (A partner asked us for an IP to whitelist to access their services)
I have ...
- 21
0
votes
0
answers
52
views
What happens to AWS PrivateLink on Outpost When Availability Zone or region is down?
What's known:
When Service Link that connect the Outpost to the AWS is down, the AWS services will not be available in Outpost.
When Availability Zone where the Outpost is assigned to is down, the ...
- 103
0
votes
1
answer
200
views
How do I deploy a docker container on AWS Elastic Beanstalk privately such that only other AWS resources can access it?
Need to make an AWS deployment decision. A lot of this tech (docker, beanstalk) is pretty new so I don't know best practices (and I'm also foggier than I'd like to be on networking and security).
Tech ...
0
votes
0
answers
24
views
Navigating to a host on the other side of a site-to-site vpn [from EC2 instance to a host on the local network]?
Hey gang! First question on serverfault so dig in wherever you can. Also relatively new to networking in general.
The issue I believe I'm running into
IP routing isn't bringing me across the VPN (...
1
vote
1
answer
423
views
Fargate task from service with Public IP disabled can't download env file from S3
We have a Fargate service that should be exposed to the internet via a load balancer, and since for tests we had used so far the random Public IP of the task, we decided to disable the Public IP, so ...
- 111
0
votes
1
answer
111
views
How to specify AWS region in CloudFormation VPC
Reading through the AWS CloudFormation VPC docs, I'm not seeing how/where I specify the region to create the VPC in. Any ideas as to how this configuration works?
- 143
0
votes
1
answer
421
views
AWS VPC Peering vs PrivateLink for network access to 3rd party cloud database
AWS here. I have a simple app server that is running on EC2 instances that are in an autoscaling ("target") group that are fronted by an application load balancer (ALB). The ALB's domain ...
- 143
1
vote
0
answers
344
views
Elastic BeanStalk can't connect to ElastiCache Redis
I'm having issues connecting from Elastic BeanStalk to ElastiCache Redis. When I SSH into the EBS instance and try to use redis-cli to connect, it times out. This is how I set up my environment:
I ...
0
votes
0
answers
83
views
VPC connection between LDAP server onsite and LDAP client in Amazon
I currently have a VPC connection between LDAP server onsite and LDAP client in Amazon. However, after some time the connection starts to fail. I can notice that, since this appears for my user (even ...
- 11
0
votes
1
answer
29
views
disassociate EIP and then convert to vps eip
I have an eip that I want to convert from scope EC2-classic to VPC. Can I disassociate, convert to VPC eip, and then just re-associate with the same ec2 instance? I'm not sure if I will be able to ...
- 103
1
vote
1
answer
206
views
AWS Postgres database IP in security group, how to enter info to survive IP address changes?
I have an existing prod Postgres database and I would like to replicate a table to a new Postgres database. In order to get the two to be able to talk to each other, I had to edit an AWS security ...
- 131
0
votes
1
answer
171
views
"AWS CIDR is not within the CIDR ranges of VPC", but it is?
many questions on this, but this time doesn't seem as obvious as the others.
I'm trying to split a VPC in two subnets.
I start with VPC 10.0.0.0/24, 254+1 IPs, from 10.0.0.1 to 10.0.0.255
I create the ...
- 3
0
votes
0
answers
38
views
Apache/AWS: How to identify local instance requests from the same VPC
In this configuration the apache server instances are all in the same VPC (across several subnets) and all incoming requests are managed via an elastic load balancer, (with ProxyProtocol=On on each ...
- 101
1
vote
1
answer
643
views
What is causing BadRequestException when calling the ExecuteStatement operation on Aurora Serverless db
I have a lambda function that retrieves records from AWS Aurora Serverless db. Now I thought of adding api gateway to trigger the lambda function but I get this error
Connect an AWS Lambda function ...
- 11
1
vote
0
answers
272
views
On AWS how can the ENI of my squid proxy become a blackhole in my route table if the EC2 instance still exists?
Been googling like crazy and can't find an answer. We have three AZs/subnets since we're in Ohio. But this diagram is close enough to explain the issue.
We've set up squid proxies to filter outbound ...
- 111
1
vote
1
answer
189
views
DNS policy for VPC endpoint
I have VPC with three subnets in different availability zones, and an interface VPC endpoint in each. The VPC endpoint has 4 DNS hostnames by default:
A regional DNS hostname, e.g. vpce-x.ec2.us-east-...
- 169
0
votes
0
answers
39
views
unable route traffic
unable to ping from one instance to another instance (Different AWS account) through VPC peering**
As a part of learning I have created VPC peering between two different AWS account similar region
1....
1
vote
2
answers
419
views
Restricting traffic between AWS VPCs
I have two VPCs: A and B.
I want any node in A to be able to open a TCP connection to any node in B, but not the other way around. Any node in B must also be able to open outgoing connections to ...
- 169
0
votes
0
answers
24
views
Web application not serving with Route53 under wifi?
I have a node application running in an Ec2 container on port 443. I've added an Elastic IP to the container. When I reference the Elastic IP or IPv4 DNS in the browser, I can see my application. I ...
- 101
0
votes
1
answer
576
views
Using the AWS VPC CNI add on for EKS can I access a pod directly via it's vpc ip address over a vpn?
My general question is in the title. I feel like I've misunderstood the way pods are connected to the VPC. I was assuming this would make pods routable on the vpc but it seems like this is not the ...
- 103
1
vote
1
answer
555
views
Will aws s3 be still accessible using pre-signed urls if we create a vpc endpoint gateway?
I have a need to add a vpc endpoint for s3 so i can access it on lambda, but when i try to create the endpoint I get a warning
Warning
When you use an endpoint, the source IP addresses from your ...
- 109
0
votes
2
answers
1k
views
Selecting subnets for a Service in Fargate
As we can see in the picture above, I can select as many subnets as I want. Does it mean, the tasks in the service are created across these two subnets?
Suppose I have one task running, in which ...
- 123