Questions tagged [amazon-vpc]

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define

Filter by
Sorted by
Tagged with
-1
votes
1answer
51 views

How to diagnose cross account EC2/RDS connection with vpc flow logs in AWS?

In AWS, made 2 accounts. account 1: A | Deployed EC2 account 2: B | Deployed RDS Want to connect from account 1's EC2 to account 2's RDS, but doesn't work. So enabled VPC flow logs to diagnose where ...
-1
votes
0answers
13 views

How to diagnose cross account RDS connection with vpc flow logs on AWS? [duplicate]

In AWS, made 2 accounts. account 1: A | Deployed EC2 account 2: B | Deployed RDS Want to connect from account 1's EC2 to account 2's RDS, but doesn't work. So enabled VPC flow logs to diagnose where ...
0
votes
1answer
31 views

Is it necessary to create two-way route for transit gateway on AWS?

For multiple aws accounts, we want to make network communicable from A to B. Use transit gateway can allow 2 different vpcs access each other. If want to access from A to B only, in account A, made a ...
0
votes
0answers
20 views

How can I make network communicable between different accounts on AWS?

For these 2 AWS accounts, have made vpc and security groups for them. account 1 Account id: 1111111 EC2 web server vpc: name:a-web-vpc id:vpc-123 sg: id:a-web-sg account 2 Account id: 2222222 EC2 ...
2
votes
0answers
20 views

Can't activate licenses on EC2 instance in private AWS subnet (but CAN download updates)

I've got an EC2 instance running WP in a private subnet behind an ELB. Everything is mostly working fine - traffic is being delivered via ELB, the private instance can download package updates and ...
1
vote
1answer
71 views

How do I determine what AWS assets are in a given VPC? And if they are all in a VPC, is there any reason to use in-transit encryption between them?

This seems like an exceptionally dumb question, but as my high school woodshop teacher said, the only dumb question is the one that doesn't get asked. I'm not entirely sure what assets are in a given ...
0
votes
0answers
28 views

Kubernetes pod, allow HTTP access just from VPN

Okay, maybe I'm not searching correctly since I didn't found the answer, so help me please. So, I have an EKS cluster (kubernetes cluster provided by AWS), and I have some web applications running ...
0
votes
1answer
82 views

AWS route 53 inbound resolver endpoints vs using .2 address in a VPC

I am looking to resolve addresses in a private hosted zone network using customised forwarding rules configured in an on-prem DNS service. The forwarding rule would effectively say, "for my ...
1
vote
0answers
16 views

Connecting to Client Data Centre using AWS VPN

I have been using AWS for the past 3 years. We have never required to connect to our client data centre using a VPN until recently. I am entirely new to the concept of VPN, however, I have figured a ...
1
vote
1answer
69 views

Hands-on experience configuring a virtual network [closed]

I want to understand the details of how a VPC or virtual overlay network is setup. I'll personally learn it best if I get some hands-on experience doing it. I was wondering if I can rent a few ...
0
votes
0answers
9 views

Does the Amazon Route 53 Resolver only work with AmazonProvidedDNS?

I want to configure the Amazon Route 53 Resolver to forward queries for a subdomain to an on-prem DNS server in a on-prem network connected to my vpc via a VPN. But I already have a dhcp scope ...
0
votes
0answers
6 views

aws Private IPv4 DNS records not resolvable after changing dhcp scope

I created a dchp scope for my VPC to point to my own windows dns servers This works as expected, linux and windows instances are automatically configured to use the IPs of my windows dns servers BUT ...
1
vote
0answers
98 views

AWS - VPC creation date

Could you possibly let me know how I can check when the VPC has been created? Or how to check in cloudtrail who created vpc via cli? I've tried to use cloudtrail and search in event name for CreateVpc ...
1
vote
0answers
20 views

Network latency & Performance for inter subnet traffic in a AZ

My current local DC deployment has 2 subnets inside a datacenter where data is injected to the instances on a subnet A and then the instance is migrated to subnet B to serve traffic We need to migrate ...
0
votes
1answer
49 views

pfSense OpenVPN on AWS VPC

We are in the process of migrating our office servers to AWS to finally decommission. Since we are familiar with pfSense, we are using a mix of AWS services but want to use pfSense as a the OpenVPC ...
0
votes
1answer
42 views

Connecting to Second Elastic IP Address assigned to an ENI on AWS EC2 instance

I have a single ENI connected to a t2.micro EC2 instance. It has an Elastic IP xxx.xxx.xxx.xxx associated with the "primary private IP address". I added a "secondary private IP Address&...
1
vote
1answer
65 views

AWS routing “lost” packets intended to a network behind VPN

I have an EC2 instance that connects to a VPN and another instance in the same VPC that emmits traffic to that VPN So the topology is something like this: The instance at 172.1.0.1 can connect to the ...
2
votes
2answers
28 views

Forbid communication between two ec2 instances within one private VPC

We have two ec2 instances within one private VPC group. Is there a way to forbid communication between ec2 servers?
1
vote
2answers
36 views

Prevent data exfiltration in AWS via HTTP and FTP

I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
0
votes
1answer
70 views

AWS routing between AZs

There's three subnets: subnet A on AZ-A, 10.0.1.0/24 subnet B on AZ-B, 10.0.2.0/24 subnet C on AZ-C, 10.0.3.0/24 There's one server on subnet A (10.0.1.50) answering to ping performed via Site-to-...
2
votes
1answer
77 views

Why would you want worker node traffic to leave a VPC? (AWS EKS)

When setting up AWS EKS, I came across a configuration option I don't understand. What is the use case for the "public" option as shown in this screenshot? This is the only option that makes ...
0
votes
0answers
15 views

How to access a private ELB URL in AWS Lambda

I have an ELB that is pointing HTTPS (443) - https://dummyendpint.com. This is in Private VPC and exposed to only whitelisted IP addresses. Now I am working on this endpoint (https://dummyendpint.com) ...
0
votes
1answer
135 views

No outbound access to internet from Windows Server 2019 on VPC

On AWS, I have a NAT instance (Linux) and a Webserver (Windows 2019) on a VPC. The web server works as it should, I can also RDP to the webserver via the nat, no issues. The problem is that there's no ...
1
vote
0answers
28 views

Setting up multiple routes to the same destination network in AWS VPC

We're in the process of moving a legacy application to AWS. This applicaton depends in a VPN set up by a third party, which provide us with two GRE/IPsec tunnels in active/standby mode, on top of ...
0
votes
0answers
23 views

Connected OpenVPN Client to AWS VPC but can't access internet

So I followed this tutorial: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-getting-started.html And I was able to set up a client VPN endpoint, I am able to see the connection as "...
1
vote
0answers
144 views

Can't route Strongswan VPN Traffic through AWS Internet Gateway

Cheers, I want to setup a VPN Server on an EC2 Instance in order to route all my private internet traffic, but I can't get it to work. Any help would be appreciated. I have the following Setup: ...
0
votes
0answers
8 views

Cannot open connection via NetworkLoadBalancer

Our setup: 1 EKS Cluster in a VPC with two subnets. 1 NLB forwarding traffic to an ingress controller on all EKS nodes. VPC(NLB -> EKS Nodes) Problem: When pods (from the EKS) try to connect back ...
0
votes
1answer
31 views

AWS Elasticache security groups for inter cluster communication

I don't really have a setup to test this, but if I create an elasticache redis cluster with more than 1 node, how exactly would a security group have to look like to be very secure but without ...
0
votes
1answer
41 views

AWS NACL by HOSTNAME

Is it possible to allow a Network ACL by a hostname? Not IP address. For a certain subnet, I want to allow all outbound traffic to host.example.com (port 443) but deny everything else.
1
vote
3answers
77 views

Static IP for outbound traffic over multiple servers

I have a cluster of servers (AWS EC2) that need to contact a specific host. This host is currently whitelisting all the server's IPs. The problem is that we are adding more servers to the cluster, and ...
0
votes
0answers
58 views

Trouble pulling a container from Docker from AWS CodeBuild

I am trying to pull a docker container in AWS CodeBuild. The build fails with this error message docker: Error response from daemon: Get https://registry-1.docker.io/v2/: net/http: request canceled ...
2
votes
0answers
38 views

Frozen/dropped TCP connections in AWS

We have a number of AWS EC2 instances within the same AZ that transmit large amounts of network traffic to each other. In a small fraction of the connections, when a client on host A connects to a ...
1
vote
1answer
1k views

AWS client VPN pricing estimation

I want to set up an AWS client VPN for managing remote access. There are around 100 users who need to access the VPN on daily basis. For this, I am assuming that all users would be connected to a VPN ...
0
votes
1answer
222 views

AWS VPC DNS Hostnames & Resolution

I'm trying to educate myself more on how DNS works, and am struggling with trying out some options in my AWS VPC. From the AWS Documentation on VPC, there are 2 DNS settings to choose from, DNS ...
0
votes
2answers
132 views

Is it better to have a centralized [redis] caching instance or per instance?

I have a VPC in AWS that contains a public and private subnet. In the private subnet, I have two load balanced EC2 app servers, and an EC2 Database/Cache server. The two app servers connect to the ...
1
vote
1answer
60 views

AWS ALB SSL/TLS offloading security

AWS ALBs allow one to configure an SSL/TLS certificate for encrypting traffic between the client and the LB. Traffic between the LB and the target can be protected with a certificate, but target ...
0
votes
0answers
27 views

Intermittent Network Across EC2 in Public Subnet / VPC. Tool to determine cause?

we have a fairly complex set-up of g4dn instance types running vMix with NDI, TeamViewer, and other streaming protocols to operate a live stream. We've had a several occasions in which TeamViewer ...
1
vote
1answer
89 views

AWS SES email delay

I am encountering the following problem here is my scenario; I have a VPC with two private subnets and one public subnet. Inside the public subnet I have a NAT instance to give outbound internet ...
0
votes
0answers
60 views

Multiple private networks across multiple hosts (KVM, OpenVSwitch)

I had asked this question on SuperUser, looks like it wasn't the correct forum. Hopefully ServerFault is the correct one. I am working on a project, running KVM virtualization on 4 different host with ...
0
votes
0answers
165 views

Site-to-Site VPN from Cisco ASA 5505 to Amazon VPC

I am trying to establish a VPN connection from our on-premises rack to our Amazon VPC. The router/firewall that we have is a Cisco ASA 5505 running software version 9.1(7)23. According to Amazon's ...
0
votes
0answers
38 views

AWS VPC DHCP Option Group. How to use Active Directory and AmazonProvidedDNS in the same VPC?

In an AWS account I work with, we have a AWS Directory Services Microsoft AD, and a number of AD joined windows servers in a VPC. To get the Windows servers to work nicely with AD, I've changed the ...
1
vote
1answer
215 views

“No such file or directory” error when trying to mount a FSx (Windows File System) share to a EC2 linux instance. How do I resolve this?

Before I describe the steps I have taken, I wanted to state that I'm following this guide: https://docs.aws.amazon.com/fsx/latest/WindowsGuide/using-file-shares.html#map-shares-linux. Specifically, ...
0
votes
0answers
171 views

AWS VPC and VPN connection to Multiple Cloud or Datacenters with Datacenters having overlapping IP address ranges

Problem Statement I have a requirement for Business continuity plan using AWS Cloud VPC with following requirements - In our developer's AWS VPC private Subnet, we will have Workspaces (ie AWS secure ...
0
votes
1answer
90 views

Lambda connect to mongodb which only allow localhost connection in ec2

I have a MongoDB which only allow connection from localhost, running on my ec2. Currently, only my nodejs app which runs on the same ec2 instance connects to the mongodb using this command mongoose....
0
votes
0answers
32 views

Issues connecting to aws ec2 instance behind eip

I have an ec2 instance on which I'm running a dev server via parcel index.html --host 0.0.0.0 that ultimately listens on 0.0.0.0:1234. Before creating and associating an eip to my instance, I wanted ...
1
vote
1answer
128 views

Do AWS Security Groups and rules and Network ACLs REJECT or DROP traffic?

AWS Security groups and AWS VPC Network ACLs are 2 solutions for controlling traffic in VPCs. When rules in either deny an IP packet, do they REJECT or DROP (in the iptables sense)? That is: are ...
0
votes
1answer
161 views

NACLs and NAT Gateways for public and private subnets

I have a VPC with 3 subnets: Public (FE layer, inbound internet access only) Protected (app layer, outbound internet access only) Private (DB layer, no internet access at all) The public subnet NACL ...
0
votes
1answer
43 views

Can I create a custom default vpc with my own cidr and settings?

GCP is so much better than aws in this regard. In GCP I can have a "default" vpc/network and have all my custom settings for it. I want the same thing for aws. I have stuff in many regions. ...
0
votes
1answer
123 views

AWS - Accessing cross account and cross region resources in a secured manner

I'm trying to secure an ec2 instance using security groups to do the following VPC A (Account - A, Region - A) VPC B (Account - B, Region - B) I want an ec2 instance in VPC A to be able to access ecr ...
2
votes
1answer
213 views

Benefits of EC2 Dedicated Instances for latency (within the same AZ)

Does dedicated instances have better latency between nodes in the same AZ? Can someone comment on the inter-node latency for the following case: 1) SharedVPC.AZ1.instance1 → SharedVPC.AZ1.instance2 (...

1
2 3 4 5
14