Questions tagged [vpc-peering]

A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

Lambda with VPC long cold start

I have few lambda functions that are connecting to Mongo Atlas cluster. Connection between Mongo Atlas and my AWS account is done via VPC Peering. Lambda functions are attached to this VPC. I'm ...
0
votes
1answer
40 views

connect Cloud SQL to Data Fusion through sqlproxy with private IP

It is my first question in this community I hope that I won't be off-topic. I'm trying to connect data fusion to Cloud SQL for MySQL Instance on Private IP. Here is what I have done so far: Creating ...
0
votes
0answers
29 views

Route (other) third-party subnet via a different VPC

I have a multi VPC setup with the below subnets, one per VPC. 10.154.1.0/24 10.154.2.0/24 On the 10.154.2.0/24 subnet, there is a machine which serves routes for a 10.235.0.0/16 subnet as this host is ...
2
votes
0answers
47 views

Cant create a “Serverless VPC Access” on Google Cloud

I am trying to create a "Serverless VPC Access" on Google Cloud, I have already done it before on another account to join Redis with CloudRun This is an example of the configuration that I ...
0
votes
1answer
21 views

AWS VPC peering response traffic - can return address CIDRs overlap?

The AWS documentation on peering refers to the situation where VPCs B and C each have a subnet with an identical CIDR and which are both peered with VPC A, as per the diagram below: The documentation ...
0
votes
1answer
42 views

VPC setup for (micro) services - shared vs. peering vs. one project - best practice

Somewhat related to this and this. This is a very basic and probably noob question. I want to set up a couple of services (mix of GCE, GAE, GCR and GCF) in the GCP (one org). Some of them need to ...
0
votes
1answer
48 views

How to access a private zone via DNS peering

Let's say I have 2 projects (A, B), each with their own VPC and VPC peering enabled between them. Then I create a private DNS zone in project A, let's say with .internal as DNS name. Then I add an A ...
0
votes
1answer
40 views

GCP VPC Peering active, connectivity tests ok, but any request (ssh, icmp…) times out

I have 2 GCP projects with 2 different VPCs: VPC1 has the default subnet VPC2 has a default subnet and a custom subnet I then have 2 instances, one in each project: instance1 has one network interface ...
1
vote
2answers
40 views

Prevent data exfiltration in AWS via HTTP and FTP

I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
0
votes
1answer
91 views

AWS Client VPN to improve cross region performance

I have a Wordpress site on AWS in us-east-1. Due to business policies, I cannot use a CDN or multi-tenant. I have admins in Australia say the site is down or slow, but it's up for me, as well as isup....
0
votes
0answers
46 views

VPC Connectors does not work in Montreal (northamerica-northeast1)

Since yesterday our VPC connectors (from region northamerica-northeast1 to networks in the same region) have not been working. When I review the connector status it shows the message: The connector is ...
0
votes
1answer
24 views

Can you have multiple active route tables in AWS?

I was trying to set up VPC peering in AWS. I got most of it working but the network connectivity didn't work. I narrowed down the difference to the routes. In my previous working system I had the ...
0
votes
1answer
118 views

Private IP connection Cloud SQL Google Cloud

In the google cloud docs it is clearly stated that connectivity to Cloud SQL using private IP can be established across regions, however it's not what I see at the moment. private access was enabled, ...
3
votes
1answer
478 views

How do I resolve a private DNS address from within an AWS Fargate task

I'm trying to setup a connection to a MongoDB Atlas database from an AWS Fargate container. The VPC peering is setup and works and I can successfully connect to the MongoDB Atlas cluster from a ...
0
votes
1answer
95 views

How to troubleshoot network flows across peered VPC

I'm trying to accomplish this: https://cloud.google.com/vpc/docs/vpc-peering#global and it isn't working. Specifically, i'm trying to access an external server via a VPN on a peered network. My ...
0
votes
1answer
49 views

Connecting to VPC internal services from Google Cloud Shell

Is it possible to access services (like CloudSQL or some custom applications) that are running on internal IPs only (VPC) from cloud shell? The idea behind it, I want to keep Cloud SQL on private IPs ...
0
votes
1answer
235 views

Connecting Google Cloud Functions across Projects

I am using Google Cloud Functions and have multiple projects with cloud functions, that need to communicate with each other. My problem is that functions can only communicate with each other if they ...
0
votes
0answers
16 views

Can VPC Peering connection tunnel packets from outside VPC subnets?

I have two VPCs with non-overlapping subnets and VPC peering enabled between them, like this: Left: 10.3.0.0/16 Right: 172.30.0.0/16 And I have configured route tables on both sides such to send ...
1
vote
1answer
43 views

Central VPN in a mulit-vpc architecture

I am designing a network flow for the following scenario - VPC 1 - hosting servers and apps in a private subnet VPC 2 - hosting servers and apps in a private subnet Management VPC (#3) - Hosting VPN ...
1
vote
1answer
190 views

What am I doing wrong with private GKEs peering and Cloud NAT?

I am trying to mount the following platform on Google Cloud: 2 private (native) GKE clusters, in 2 different VPCs and to give them access to the internet, each vpc has a Cloud Nat configurated. What ...
1
vote
2answers
66 views

Cannot connect to Google Cloud Services on GCE instance using an external static IP Address

I‘m trying to connect to services hosted on Google Cloud, e.g. gcr.io (which is very important to me as my Docker images are hosted over there) via a GCE instance. Using an external static IP address ...
0
votes
1answer
300 views

Connect to active directory over peered VPC

I have a VPC(VPC1) where my main instances are running, and I have another one (VPC2)specifically for directory service (AD Connector) and a MS AD server running. I have created a VPC peering (which ...
1
vote
1answer
102 views

google route peering as nexthop

Using the google cloud web interface for add a custom route with a peering as nexthop,But in this interface and in gcloud too, we can select only as next hop: --next-hop-address=NEXT_HOP_ADDRESS --...
2
votes
1answer
194 views

Shared VPC and VPC Peering mix

On Google cloud, I have setup new three projects - dev, research and prod. So, then created an Shared VPC Host and three Service Projects as listed above. Also intend to have separate VPCs for each of ...
0
votes
1answer
108 views

How to make AWS resolves domain name to internal IP

I have a VPC peering established with MongoDB Atlas, however when I try to resolve the database cluster's domain from within an EC2 instance in the same VPC, I get back the public IP. This is a ...
0
votes
2answers
50 views

Criteria for Determining How Many AWS VPCs to Use for Apps? Inter-VPC vs. Intra-VPC Traffic

I can't seem to find any specific guidance on what constitutes good practice with regards to the use of one VPC vs. many for application hosting. This link touches on the subject, but is quite old and ...
0
votes
1answer
2k views

Not able to access RDS instance inside EKS cluster | EKS <-> RDS connection

I'm trying to access my existing RDS instance in the newly created EKS cluster. steps I have followed: Create a VPC peering connection by keeping RDS as requester and EKS as accepter. Add destination ...
1
vote
1answer
170 views

Connection though VPC peering from VM to Kubernetes Service

I have 2 VPCs in GPC, the first one (VPC-1) running k8s cluster and the second running some VMs (VPC-2). I created a VPC peering between these 2 VPCs and I am able to connect from VM on VPC-2 to pod ...
5
votes
4answers
3k views

Cannot connect to Cloud SQL Postgres from GKE via Private IP

I am having trouble accessing a Cloud SQL instance running Postgres from a GKE cluster using the database's private IP. All the documentation I've found suggests using a VPC-enabled cluster to ...
2
votes
1answer
549 views

AWS Client VPN Access to a Peered VPC

In my AWS infrastructure there are a few VPC. 3 days ago I created Client VPN in VPC1, and successfully configured access to VPC2 according the instruction: https://docs.aws.amazon.com/vpn/latest/...
0
votes
1answer
537 views

ALB can't forward to NLB over VPC Peering Connection

I have an internet-facing ALB in VPC1 and an internal NLB in VPC2 The NLB is pointed at an ECS service and health-checks are healthy The ECS Task Security Group allows traffic from VPC1 CIDR as well ...
3
votes
1answer
228 views

Terraform: using exportCustomRoutes when setting peering connection

I am trying to set-up a peering connection between 2 VPC networks. One network (the transit one) configures static routes, and I would like to have those propagated to the peered network. Here's an ...
2
votes
1answer
2k views

Cannot ping between EC2 instances in peered VPCs

I am trying to setup a barebones VPC connection within the same AWS account. VPC-A and Subnet-A have CIDR: 10.200.1.0/24 VPC-B and Subnet-B have CIDR: 10.200.2.0/24 Each VPC contains one EC2 ...
0
votes
1answer
502 views

how do i get a vpc id from another account with terraform

I have an existing VPC in a separate account and am creating independent terraforms for more vpc's in new accounts. I wish to peer specific vpc's within each account but am finding it hard to ...
5
votes
1answer
2k views

How to configure cross region VPC peering on AWS with Terraform

I'm trying to create a terraform configuration to spin up multiple VPCs in different regions and create VPC peer connections between them. This is my module for the VPC # Required Variables ...
0
votes
1answer
63 views

Connecting two AWS VPCs in different regions

I have 2 VPC's in different regions (Virginia and Ohio) They both have IP ranges of: 172.31.0.0/16 Do I need to change the IP ranges of one region? How would I do that if I already have servers ...
0
votes
1answer
2k views

How to make GKE Services visible to another GKE cluster running in a different VPC

I am struggling to make Services become visible though peered VPC. I have two GKE clusters (cluster-A and cluster-B) each of then in a different VPC. I've created a VPC network peering connecting ...
0
votes
1answer
170 views

Forward from VPN to non-VPN network

I want to connect an existing Kubernetes cluster to remote VPN that uses only a specific subnet IP range. I could create a custom-mode VPC network within my project that only has the appropriate ...
0
votes
1answer
81 views

How can I send/generate traffic in GCP?

I'm using GCP for building a simple scenario. I set 3 VMs in deferent locations in a default VPC. I would like to send/generate traffic in order to use VPC flow logs, but I don't know how to do that.
4
votes
1answer
3k views

Issue Connecting to Cloud SQL Postgres using Private IP from GKE

Steps I have followed: 1. Create VPC network gcloud compute networks create stg-vpc \ --subnet-mode custom 2. Create IP range for VPC Peering for this network gcloud beta compute addresses ...
0
votes
2answers
1k views

Google Cloud Platform VPN and multiple projects

Is it possible, and does it make sense, to route traffic for multiple GCP projects through a single project back to my head office over VPN? Before I get too far down the rabbit hole the idea was to ...
0
votes
1answer
2k views

Google Cloud VPC network peering - DNS not shared?

I've got two VPC Networks: A B They are linked with eachother trough VPC network peering. Machines from network A can reach machines from network B just fine via IP. However, they are not capable ...
0
votes
1answer
2k views

Connecting from an AWS Lambda function or service within a VPC to a customer's private network over VPN tunnel

We are currently running AWS Lambda functions within a VPC and for example already have a peering connection setup to MongoDB Atlas to have our AWS Lambda's within the VPC communicate to our MongoDB ...
0
votes
1answer
173 views

How can you connect two Amazon VPCs through VPC peering if they are already configured with the network IPs?

According to AWS documentation you can connect up to 50 VPC through VPC peering but you have to make sure there's not IP overlapping so my questions here are: How can you come up with so many ...
0
votes
2answers
905 views

How to route traffic from host in VPC via host in different VPC

tl;dr Is there any way to route traffic from 172.20.0.100 to 200.0.0.100 in the diagram via 10.0.0.6 ? I have a setup where we have an existing AWS VPC (172.20.0.0/16) with a number of hosts in it. ...
1
vote
1answer
656 views

AWS VPC Peered - RDS accessing Active Directory Service

I have two aws accounts and I could establish a peering of two VPCs belonging to each account. Also, I was able to launch an EC2 instance one account joining to the AD domain on the other account. The ...
0
votes
1answer
108 views

Issue connecting EC2 instances in 2 separate VPCs (same region)

I have 2 VPCs (default and special) each hosting 1 EC2 instance. Both instances have the same security group (say name = internal). The security group allows All Traffic from internal (a circular ...
0
votes
2answers
2k views

Google Cloud routing with VPCs peered in a partially connected mesh topology

we are dividing our Google Cloud infrastructure into multiple projects, each with it's own VPC. We have one central VPC, let's call it vpcA, to which we connect via pritunl VPN and site-to-site tunnel ...
0
votes
0answers
314 views

How an Ec2 node can contact eni of a different node in different AWS account and vpc

I have a requirement that one of my EC2 instance's originating traffic to a specific ip address needs to land to a ENI of a different EC2 instance which is present in different account and different ...
1
vote
1answer
959 views

Solving the mystery - VPCs have overlapping IPv4 CIDR blocks

In AWS, When I try to create a peering connection I get this following error Failed due to incorrect VPC-ID, Account ID, or overlapping CIDR range I am not savvy with the networking and wonder how I ...