Questions tagged [vpc-peering]

A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses.

Filter by
Sorted by
Tagged with
0 votes
1 answer
24 views

AWS VPC Peering vs PrivateLink for network access to 3rd party cloud database

AWS here. I have a simple app server that is running on EC2 instances that are in an autoscaling ("target") group that are fronted by an application load balancer (ALB). The ALB's domain ...
user avatar
0 votes
1 answer
45 views

Direct Traffic from a Pulbic ALB to an Internal ALB for EKS

So I have an EKS cluster sitting in a dedicated VPC (EKS-VPC) In my Main VPC I have a public-facing ALB that I want it to somehow direct traffic to services running in EKS. More specifically I want ...
user avatar
0 votes
1 answer
25 views

PEERING connectivity issues between VPC's?

Could you help me with the network infrastructure below reference "PEERING" ? We have in GCP Cloud 2(two) VPC The First - "vpc-shared-nonprod" Projetc Name: "Shared" ...
user avatar
0 votes
1 answer
21 views

In DataPrep, How to create connection with instance of sql without public ip on google cloud platform?

In Dataprep, when creating the connection there is the 'Test Connection' button, after filling in all the connection data, with the private ip, port, username and password, I click on the test button ...
user avatar
0 votes
0 answers
33 views

unable route traffic

unable to ping from one instance to another instance (Different AWS account) through VPC peering** As a part of learning I have created VPC peering between two different AWS account similar region 1....
user avatar
1 vote
2 answers
101 views

Restricting traffic between AWS VPCs

I have two VPCs: A and B. I want any node in A to be able to open a TCP connection to any node in B, but not the other way around. Any node in B must also be able to open outgoing connections to ...
user avatar
  • 169
0 votes
0 answers
48 views

GCP VPN Tunnel is up, I can see Sent Bytes, but traffic is not reaching the recipient

I am trying to establish a VPN tunnel between a Classic CPN gateway and an on-prem VPN gateway. A requirement for the on-prem gateway is that traffic coming out of my VPN must present as a public ...
user avatar
  • 1
1 vote
0 answers
49 views

AWS VPC CIDRs in both 10.0.0.0/8 and 192.168.0.0/16

I have VPC A with CIDR 10.A.0.0/16 and VPC B with CIDR 10.B.0.0/16. I have VPC A and B peered and updated the route tables and from a server in 10.B.0.0/16 can ping a server in 10.A.0.0/16 and vice ...
user avatar
  • 111
0 votes
0 answers
133 views

AKS multi-cluster peering not working for Kubernetes services

We have 2 AKS clusters (not private) deployed in West Europe and East US, without availability zones, Azure CNI networking, Azure network policy (not calico), and everything is provisioned with ...
user avatar
1 vote
2 answers
58 views

I have created one vpc with three different subnets and I am facing issue while doing ssh from instances. getting check public key error

I have created one vpc with three different subnets and I am facing issue while doing ssh from instances. getting check public key error but succeed before. tarun@eu-vm:~$ ssh 192.168.0.3 Linux web-...
user avatar
0 votes
1 answer
173 views

Lambda with VPC long cold start

I have few lambda functions that are connecting to Mongo Atlas cluster. Connection between Mongo Atlas and my AWS account is done via VPC Peering. Lambda functions are attached to this VPC. I'm ...
user avatar
0 votes
1 answer
275 views

connect Cloud SQL to Data Fusion through sqlproxy with private IP

It is my first question in this community I hope that I won't be off-topic. I'm trying to connect data fusion to Cloud SQL for MySQL Instance on Private IP. Here is what I have done so far: Creating ...
user avatar
0 votes
0 answers
40 views

Route (other) third-party subnet via a different VPC

I have a multi VPC setup with the below subnets, one per VPC. 10.154.1.0/24 10.154.2.0/24 On the 10.154.2.0/24 subnet, there is a machine which serves routes for a 10.235.0.0/16 subnet as this host is ...
user avatar
3 votes
1 answer
701 views

Cant create a "Serverless VPC Access" on Google Cloud

I am trying to create a "Serverless VPC Access" on Google Cloud. I have already done it before on another account to join Redis with CloudRun. This is an example of the configuration that I ...
user avatar
0 votes
1 answer
53 views

AWS VPC peering response traffic - can return address CIDRs overlap?

The AWS documentation on peering refers to the situation where VPCs B and C each have a subnet with an identical CIDR and which are both peered with VPC A, as per the diagram below: The documentation ...
user avatar
  • 223
0 votes
1 answer
116 views

VPC setup for (micro) services - shared vs. peering vs. one project - best practice

Somewhat related to this and this. This is a very basic and probably noob question. I want to set up a couple of services (mix of GCE, GAE, GCR and GCF) in the GCP (one org). Some of them need to ...
user avatar
  • 111
0 votes
1 answer
137 views

How to access a private zone via DNS peering

Let's say I have 2 projects (A, B), each with their own VPC and VPC peering enabled between them. Then I create a private DNS zone in project A, let's say with .internal as DNS name. Then I add an A ...
user avatar
  • 179
0 votes
1 answer
193 views

GCP VPC Peering active, connectivity tests ok, but any request (ssh, icmp...) times out

I have 2 GCP projects with 2 different VPCs: VPC1 has the default subnet VPC2 has a default subnet and a custom subnet I then have 2 instances, one in each project: instance1 has one network interface ...
user avatar
1 vote
2 answers
97 views

Prevent data exfiltration in AWS via HTTP and FTP

I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
user avatar
  • 113
0 votes
1 answer
196 views

AWS Client VPN to improve cross region performance

I have a Wordpress site on AWS in us-east-1. Due to business policies, I cannot use a CDN or multi-tenant. I have admins in Australia say the site is down or slow, but it's up for me, as well as isup....
user avatar
  • 103
0 votes
0 answers
52 views

VPC Connectors does not work in Montreal (northamerica-northeast1)

Since yesterday our VPC connectors (from region northamerica-northeast1 to networks in the same region) have not been working. When I review the connector status it shows the message: The connector is ...
user avatar
0 votes
1 answer
29 views

Can you have multiple active route tables in AWS?

I was trying to set up VPC peering in AWS. I got most of it working but the network connectivity didn't work. I narrowed down the difference to the routes. In my previous working system I had the ...
user avatar
0 votes
1 answer
251 views

Private IP connection Cloud SQL Google Cloud

In the google cloud docs it is clearly stated that connectivity to Cloud SQL using private IP can be established across regions, however it's not what I see at the moment. private access was enabled, ...
user avatar
3 votes
1 answer
1k views

How do I resolve a private DNS address from within an AWS Fargate task

I'm trying to setup a connection to a MongoDB Atlas database from an AWS Fargate container. The VPC peering is setup and works and I can successfully connect to the MongoDB Atlas cluster from a ...
user avatar
0 votes
1 answer
377 views

How to troubleshoot network flows across peered VPC

I'm trying to accomplish this: https://cloud.google.com/vpc/docs/vpc-peering#global and it isn't working. Specifically, i'm trying to access an external server via a VPN on a peered network. My ...
user avatar
  • 128
0 votes
1 answer
565 views

Connecting to VPC internal services from Google Cloud Shell

Is it possible to access services (like CloudSQL or some custom applications) that are running on internal IPs only (VPC) from cloud shell? The idea behind it, I want to keep Cloud SQL on private IPs ...
user avatar
1 vote
2 answers
946 views

Connecting Google Cloud Functions across Projects

I am using Google Cloud Functions and have multiple projects with cloud functions, that need to communicate with each other. My problem is that functions can only communicate with each other if they ...
user avatar
1 vote
1 answer
54 views

Central VPN in a mulit-vpc architecture

I am designing a network flow for the following scenario - VPC 1 - hosting servers and apps in a private subnet VPC 2 - hosting servers and apps in a private subnet Management VPC (#3) - Hosting VPN ...
user avatar
1 vote
1 answer
535 views

What am I doing wrong with private GKEs peering and Cloud NAT?

I am trying to mount the following platform on Google Cloud: 2 private (native) GKE clusters, in 2 different VPCs and to give them access to the internet, each vpc has a Cloud Nat configurated. What ...
user avatar
1 vote
2 answers
103 views

Cannot connect to Google Cloud Services on GCE instance using an external static IP Address

I‘m trying to connect to services hosted on Google Cloud, e.g. gcr.io (which is very important to me as my Docker images are hosted over there) via a GCE instance. Using an external static IP address ...
user avatar
0 votes
1 answer
468 views

Connect to active directory over peered VPC

I have a VPC(VPC1) where my main instances are running, and I have another one (VPC2)specifically for directory service (AD Connector) and a MS AD server running. I have created a VPC peering (which ...
user avatar
1 vote
1 answer
185 views

google route peering as nexthop

Using the google cloud web interface for add a custom route with a peering as nexthop,But in this interface and in gcloud too, we can select only as next hop: --next-hop-address=NEXT_HOP_ADDRESS --...
user avatar
  • 5,089
2 votes
1 answer
344 views

Shared VPC and VPC Peering mix

On Google cloud, I have setup new three projects - dev, research and prod. So, then created an Shared VPC Host and three Service Projects as listed above. Also intend to have separate VPCs for each of ...
user avatar
  • 21
0 votes
1 answer
309 views

How to make AWS resolves domain name to internal IP

I have a VPC peering established with MongoDB Atlas, however when I try to resolve the database cluster's domain from within an EC2 instance in the same VPC, I get back the public IP. This is a ...
user avatar
0 votes
2 answers
88 views

Criteria for Determining How Many AWS VPCs to Use for Apps? Inter-VPC vs. Intra-VPC Traffic

I can't seem to find any specific guidance on what constitutes good practice with regards to the use of one VPC vs. many for application hosting. This link touches on the subject, but is quite old and ...
user avatar
  • 153
1 vote
1 answer
4k views

Not able to access RDS instance inside EKS cluster | EKS <-> RDS connection

I'm trying to access my existing RDS instance in the newly created EKS cluster. steps I have followed: Create a VPC peering connection by keeping RDS as requester and EKS as accepter. Add destination ...
user avatar
1 vote
1 answer
251 views

Connection though VPC peering from VM to Kubernetes Service

I have 2 VPCs in GPC, the first one (VPC-1) running k8s cluster and the second running some VMs (VPC-2). I created a VPC peering between these 2 VPCs and I am able to connect from VM on VPC-2 to pod ...
user avatar
6 votes
4 answers
4k views

Cannot connect to Cloud SQL Postgres from GKE via Private IP

I am having trouble accessing a Cloud SQL instance running Postgres from a GKE cluster using the database's private IP. All the documentation I've found suggests using a VPC-enabled cluster to ...
user avatar
2 votes
1 answer
948 views

AWS Client VPN Access to a Peered VPC

In my AWS infrastructure there are a few VPC. 3 days ago I created Client VPN in VPC1, and successfully configured access to VPC2 according the instruction: https://docs.aws.amazon.com/vpn/latest/...
user avatar
  • 113
0 votes
1 answer
813 views

ALB can't forward to NLB over VPC Peering Connection

I have an internet-facing ALB in VPC1 and an internal NLB in VPC2 The NLB is pointed at an ECS service and health-checks are healthy The ECS Task Security Group allows traffic from VPC1 CIDR as well ...
user avatar
  • 101
3 votes
1 answer
322 views

Terraform: using exportCustomRoutes when setting peering connection

I am trying to set-up a peering connection between 2 VPC networks. One network (the transit one) configures static routes, and I would like to have those propagated to the peered network. Here's an ...
user avatar
  • 133
4 votes
1 answer
3k views

Cannot ping between EC2 instances in peered VPCs

I am trying to setup a barebones VPC connection within the same AWS account. VPC-A and Subnet-A have CIDR: 10.200.1.0/24 VPC-B and Subnet-B have CIDR: 10.200.2.0/24 Each VPC contains one EC2 ...
user avatar
0 votes
1 answer
885 views

how do i get a vpc id from another account with terraform

I have an existing VPC in a separate account and am creating independent terraforms for more vpc's in new accounts. I wish to peer specific vpc's within each account but am finding it hard to ...
user avatar
  • 1
6 votes
1 answer
3k views

How to configure cross region VPC peering on AWS with Terraform

I'm trying to create a terraform configuration to spin up multiple VPCs in different regions and create VPC peer connections between them. This is my module for the VPC # Required Variables ...
user avatar
  • 235
0 votes
1 answer
76 views

Connecting two AWS VPCs in different regions

I have 2 VPC's in different regions (Virginia and Ohio) They both have IP ranges of: 172.31.0.0/16 Do I need to change the IP ranges of one region? How would I do that if I already have servers ...
user avatar
0 votes
1 answer
3k views

How to make GKE Services visible to another GKE cluster running in a different VPC

I am struggling to make Services become visible though peered VPC. I have two GKE clusters (cluster-A and cluster-B) each of then in a different VPC. I've created a VPC network peering connecting ...
user avatar
0 votes
1 answer
174 views

Forward from VPN to non-VPN network

I want to connect an existing Kubernetes cluster to remote VPN that uses only a specific subnet IP range. I could create a custom-mode VPC network within my project that only has the appropriate ...
user avatar
0 votes
1 answer
142 views

How can I send/generate traffic in GCP?

I'm using GCP for building a simple scenario. I set 3 VMs in deferent locations in a default VPC. I would like to send/generate traffic in order to use VPC flow logs, but I don't know how to do that.
user avatar
4 votes
1 answer
3k views

Issue Connecting to Cloud SQL Postgres using Private IP from GKE

Steps I have followed: 1. Create VPC network gcloud compute networks create stg-vpc \ --subnet-mode custom 2. Create IP range for VPC Peering for this network gcloud beta compute addresses ...
user avatar
0 votes
2 answers
2k views

Google Cloud Platform VPN and multiple projects

Is it possible, and does it make sense, to route traffic for multiple GCP projects through a single project back to my head office over VPN? Before I get too far down the rabbit hole the idea was to ...
user avatar
  • 111