Questions tagged [amazon-vpc]
Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual network that you define
756
questions
2
votes
1
answer
2k
views
Ansible: Extract value from the register variables to use it in other plays within same playbook
I'm setting up a complete environment using Ansible. For some reason, Ansible is not picking up variable values.
I'm using Ansible 2.1.1.0.
Here's a strip example of what I'm trying to do:
I have ...
- 315
2
votes
1
answer
879
views
ansible to create vpc asking for hosts
I'm pretty new to ansible and from reading things what I'm doing should work. I have the following file called aws.yml
---
- hosts: localhost
connection: local
gather_facts: no
vars:
...
- 22.5k
2
votes
1
answer
4k
views
Why I can't ping server on remote network from AWS through VPN
I've created a VPC in Amazon and created a number of subnets - both public and private.
1 of these subnets is a private subnet that has a linux server in it.
I've created a virtual private gateway for ...
- 141
2
votes
2
answers
4k
views
AD/DNS/DHCP domain controller in Amazon EC2 or VPC: migrating production environment
I currently have a co-location production environment which I want to migrate to AWS. Our infrastructure relies heavily on Active Directory for access to several platforms hosted within the ...
2
votes
1
answer
2k
views
Amazon AWS VPC how to open a port? [duplicate]
Possible Duplicate:
How to setup a MySql server to accept remote connections?
I have a VPN with public and private subnets; I am considering only public subnet for now.
The node 10.0.0.23, I can ...
- 131
2
votes
2
answers
6k
views
Amazon VPC NAT not working
I'm trying to create a NAT instance for my VPC to allow instances on private subnets connect to the internet (most importantly, S3). I tried following the instructions here: http://docs....
- 121
2
votes
2
answers
280
views
Why is my Google Cloud Function timing out when making a HTTP request to my AWS Fargate instance?
I am working on a Google cloud function for beforeSignIn trigger which needs to fetch some data from a microservice hosted on a AWS Fargate instance. The request times out but only in the Google cloud ...
- 31
2
votes
2
answers
2k
views
AWS security group cross regions
I am trying to set a security group A to allow SSH access from security group B in a different region. I don't have much experience with networking in general and AWS networking.
Followed the ...
- 199
2
votes
2
answers
982
views
Forbid communication between two ec2 instances within one private VPC
We have two ec2 instances within one private VPC group. Is there a way to forbid communication between ec2 servers?
- 23
2
votes
1
answer
442
views
Aws console vpc id does not match aws cli
When I log into my aws console I see the vpc id as "vpc-6856c210" however on my server through the aws cli I see "vpc-82fe07e9"
When I try to run a terraform script I get an error if i use 'vpc-...
- 137
2
votes
1
answer
383
views
Setting up RRAS VPN on separate subnet with AWS
Basic Layout:
VPC has IP range 10.0.0.0/16
2 EC2s on subnet 10.0.0.0/24
First with RRAS providing IP addresses to VPN clients (range 10.0.4.0/24)
Second just a test machine to receive pings
Other ...
- 153
2
votes
1
answer
977
views
AWS Connect WorkSpace Desktops to EC2 SQL Database on Same VPC
Ec2 SQL Database server:
Connection-specific DNS Suffix . : ec2.internal
Link-local IPv6 Address . . . . . : fe80::9ca:e9d1:a7b5:3e42%16
IPv4 Address. . . . . . . . . . . : 172.31.21.189
Subnet Mask ...
- 443
2
votes
1
answer
774
views
How to Virtual static routing in CSR 1000v on AWS?
I'm trying to do static routing for 2 Cisco CSR 1000v routers which are deployed on 3 VMs in AWS, but it didn't work.
I configured correctly 2 interfaces of both routers, but when I tried to ping the ...
- 139
2
votes
1
answer
4k
views
How to get AWS public IP CIDR range of a VPC
I have a VPC running on AWS which was created using kops, and the databases are running on mongo-atlas using GCP as a cloud provider.
The mongo database servers are open to the world, what I'm trying ...
- 123
2
votes
2
answers
887
views
How to connect with multi region private subnets through single VPN?
I had created 3 VPC's in three regions and I configured VPC peering between this 3 regions and it's working fine I can ping all the servers from any region through private ip's, I had configured ...
- 21
2
votes
3
answers
3k
views
inter-cloud vpn tunneling (AWS and Azure)
I'm trying to establish a VPN site-to-site between a VPC in Amazon Web Services and a VNet in Microsoft Azure. For that I'd like to use AWS' Virtual Private Gateway on one side and Azure's Virtual ...
2
votes
1
answer
2k
views
One-Way VPN connection from VPC to on-premise network
I want to connect a VPC to an on premise server via one VPN connection. This needs to be only one-way (from AWS to on-premise, outgoing) connection NOT site-to-site.
I have set up AWS VPN Connection, ...
- 261
2
votes
2
answers
4k
views
Connect QuickSight to the private Redshift cluster
Can anyone tell me if it is possible to connect QuickSight to the Redshift cluster which is not publicly accessible?
Documentation tells only this:
Q: How do I connect my VPC to Amazon QuickSight?
...
- 21
2
votes
1
answer
2k
views
Connecting OpenVPN client over Peering Connection to different VPC AWS
I am trying to connect the VPN client to VPC different than VPN server belongs to. That's my setup: Network diagram
However I can't manage the VPN client 10.8.0.6 to be able to reach the instance in ...
- 183
2
votes
1
answer
2k
views
Using AWS, EC2, can't reach port 1433 for sql server
we're using two AWS EC2 instances, win 2012 servers, one for MS SQL Server and one for IIS. IIS is unable to reach port 1433 on the SQL Server. Here's what we've tried:
Checked VPC setting and no ...
- 131
2
votes
1
answer
2k
views
AWS Network ACL/Security groups and RDS access
Just want to clarify a few settings on a new Amazon setup I'm creating. I have followed a number of guides and everything appears to be working and secure, I'd just really appreciate if someone who is ...
- 121
2
votes
1
answer
4k
views
AWS CloudFormation Create Route 53 Private Hosted Zone
Hello and thanks in advance...
I'm leveraging AWS CloudFormation to automatically build up a VPC and Subnets etc.
I would like the CloudFormation template to create a Route 53 Private Hosted Zone ...
- 131
2
votes
1
answer
1k
views
Can you setup multiple Public subnets on a single AWS VPC?
So here is our scenario, we currently have a production environment on AWS, we utilize an VPC, and use multiple EC2 servers that are all on this VPC. In order to create a development environment that ...
- 121
2
votes
1
answer
3k
views
How to configure network on EC2 instance launched by Vagrant?
This is my AWS setup:
1 VPC with:
default public subnet, 10.0.0.0/24
1 EC2 micro instance, private 10.0.0.172 and public Elastic IP
1 RDS instance, running MySQL
The EC2 instance has network ...
- 328
2
votes
1
answer
453
views
EC2 server in VPC stops responding after joining domain
We have a EC2 Windows Server set up and running in our VPC, connected to our network via a Juniper 5GT. This is working well, with the tunnel up and stable.
If I then join the server to our local ...
- 161
2
votes
0
answers
64
views
aws Private IPv4 DNS records not resolvable after changing dhcp scope
I created a dchp scope for my VPC to point to my own windows dns servers
This works as expected, linux and windows instances are automatically configured to use the IPs of my windows dns servers
BUT ...
- 4,253
2
votes
0
answers
393
views
Frozen/dropped TCP connections in AWS
We have a number of AWS EC2 instances within the same AZ that transmit large amounts of network traffic to each other. In a small fraction of the connections, when a client on host A connects to a ...
- 471
2
votes
0
answers
316
views
Unable to do immutable managed update in single instance environment in elastic beanstalk
I am unable to successfully execute immutable managed update in single instance environment. Process always timeouts with this error as shown in events page:
Service:AmazonCloudFormation, Message:...
- 21
2
votes
0
answers
224
views
Does the AWS Client VPN service support two-way traffic?
I have successfully set up the AWS Client VPN service in my account.
In a single VPC I have created a subnet to host my EC2 instances (10.10.0.0/20) whilst the Client VPN is on a 10.25.0.0/20 subnet.
...
- 113
2
votes
1
answer
1k
views
How to add a physical connections to Cisco CSR 1000 in AWS?
I deployed 2 Cisco CSR 1000 routers in one VPC-1 at a region A, and at region B I deployed another one.
I would like to make a physical connection between these 3 routers.
Also, I tried to ping ...
- 139
2
votes
1
answer
2k
views
AWS private subject cannot hit S3 using VPC endpoint
I have a private subnet in my VPC. I've sshed into this instance from a public subnet. Using a nat gateway, I'm able to run aws s3 ls and see all my buckets with no issues.
Once I delete the nat ...
- 121
2
votes
1
answer
3k
views
Network problems when I create Beanstalk environments from an AMI
I'm using AWS elastic beanstalk web interface to create an environment based on an existing AMI that has our application deployed on it.
The environment gets created, the app is accessible via the ...
- 21
2
votes
0
answers
158
views
VPN connection between 2 AWS regions
We have a setup where already AWS and Azure is VPN connected using a RRAS instance on AWS side. Also On-Premise and AWS is connected through an AWS VPn gateway and an on-Premise Sonicwall FW with ...
- 121
2
votes
0
answers
350
views
how to change windows 2016 docker dynamic / ephemeral port range
So I've been trying to use Windows Server 2016 docker on AWS EC2 and it seems by default when the docker container try to access the internet, it uses an ephemeral port range of 1024 and above?
Is ...
- 523
2
votes
1
answer
163
views
Terraform - Joining infrastructure and application configurations
I have 2 scripts for Terraform:
Used to launch the infrastructure (VPC, Security groups, MySQL, Redis, Cassandra) servers.
Used to launch the application (Auto scale groups, Load balancers, DNS ...
- 151
2
votes
2
answers
2k
views
Add ElastiCache Cluster to Elastic Beanstalk Application
I have an Elastic Beanstalk app setup utilizing the docker platform. Everything runs smoothly and I can redeploy the app using the eb deploy cli command. The app is setup on a custom VPC (something I ...
- 211
2
votes
0
answers
411
views
Routing a flannel overlay network through AWS VP peering
I have 2 VPC on AWS VPC-A 172.31.0.016 and VPC-B 172.17.0.0/24
I've created a VPC peering and I can reach all the services running on VPC-B from VPC-A and vice versa.
Now I created a flannel virtual ...
- 121
2
votes
3
answers
12k
views
Configuring multiple ENIs on an EC2 instance
How do you configure the interfaces in the OS without using ec2-net-utils?
I need to configure around 18 public ips to be accessible on a single EC2 instance. Each public IP needs to be bound to a ...
- 1,168
2
votes
1
answer
582
views
How to redirect traffic on vpc instance
I'm working with Amazon web services and I have a VPC with two instances one of the instances is running my app and the other one has a VPN connection to a payments system. The VPN tunnel is working ...
- 23
2
votes
1
answer
789
views
AWS Close Ports on Specific Elastic IP Addresses for EC2 Instance
I have a Windows Server in AWS EC2. I have opened ports 80 and 443 to 0.0.0.0/0, and RDP to a private IP address for VPN access. The instance has 4 total elastic IP addresses, each mapping to a ...
2
votes
1
answer
1k
views
Difference between "ingestionTime" and "timestamp" in AWS VPC flow logs?
I can see both "ingestionTime" and "timestamp" in my AWS VPC flow logs. The timestamp seems to change more frequently than the ingestionTime, but neither seems to tell me very much.
The docs here ...
- 265
2
votes
1
answer
1k
views
Using my private DNS from within AWS VPC via Route 53
I have an Amazon VPC connected to our corporate network. Each EC2/beanstalk (linux) instance uses the standard AWS supplied IP address for its name server in /etc/resolv.conf. Each EC2 instance can ...
- 21
2
votes
0
answers
915
views
Create RDS Read-Replicate in a separate region using VPC
We have a MySQL RDS instance in a VPC, and want to setup a read-replicata in another region.
Unfortunately since our RDS instance is in a VPC, we don't appear to have the option to replicate across ...
- 273
2
votes
0
answers
2k
views
Connecting to Amazon VPC instance's public IP over hardware VPN
I'm trying to configure an AWS VPC with a public subnet and hardware VPN access, but I have a requirement that connections over the VPN must be able to connect to a particular EC2 instance using a ...
- 121
2
votes
1
answer
512
views
AWS VPC Routing to CIDR not part of VPC
I have two VPCs setup, one in Sydney and another Oregon.
From my datacenter I have a VPN connection into the Sydney VPC.
A routing rule exists in my Sydney VPC to route all traffic to the Oregon ...
- 131
1
vote
3
answers
3k
views
Public and private subnet in VPC
IANA established certain blocks of IP as private IP range(shown below)
10.0.0.0 – 10.255.255.255 (255.0.0.0)
172.16.0.0 – 172.31.255.255 (255.255.0.0)
192.168.0.0 – 192.168.255.255 (...
- 121
1
vote
2
answers
3k
views
How can I get the VPC CIDR range from within an AWS Instance?
I'm trying to programatically set the routes that a vpn should push to clients, one of the main ones being the VPC network. Is there a way to get the VPC CIDR block from within my vpn instance?
- 5,690
1
vote
2
answers
4k
views
How to set up AWS Network Access Control List for SSH to private subnet
I'm doing a course on AWS. What I'm trying to do is set up a VPC with two Linux servers. I've set up the VPC with two subnets. I have put one server in each. The idea is that one subnet is public the ...
- 454
1
vote
2
answers
478
views
I would like to confirm if the ipv6 subnet is public
I recently created a AWS VPC with IPV6 CIDR block. The CIDR block which is allocated to me is 2600:XXXX:XXXX:9500::/56.
I have some basic knowledge about ipv6 subnet range including ipv6 public and ...
Rajgourav Jain
1
vote
1
answer
3k
views
how to test if aws nat gateway static ip is up?
I started two EC2 instances in an Elastic Beanstalk autoscaling group in a VPC. The app on these EC2 instances needs to connect to a third party service that uses an IP address whitelist to allow ...
