Skip to main content

Questions tagged [vpc-peering]

A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them using private IPv4 addresses or IPv6 addresses.

Filter by
Sorted by
Tagged with
0 votes
0 answers
26 views

Options to enforce transitive routing in 3 peered VPCs in AWS

To start this off, this is strictly a test scenario that I'm playing with, I know transitive peering is not allowed but I would still like to know what technical workarounds are possible to enforce ...
lazy_davinci's user avatar
0 votes
0 answers
12 views

Traffic flow between network-interface due to VPC peering

We have a scenario, where we have SBC instance which has three network interface attached to it(1,2,3). SBC instance along with network interface 1(management),2 are deployed in VPC A, where as ...
user391's user avatar
0 votes
0 answers
129 views

AWS - I want to route traffic from one VPC to another, but I want all traffic INTO that VPC to share an IP

Due to a very complicated situation that I can't really get into, we have a VPC that has access to a certain server via a direct connection. This server requires that we whitelist an IP to access it. ...
Whitewind617's user avatar
1 vote
0 answers
289 views

Is it possible to use both VPC peering and Transit Gateway?

I currently have 2 VPCs with an InternetGateway each VPC1 and VPC2. I need VPC2 to use VPC1's public IP. I'd rather modify VPC1 as little as possible. There is a lot of traffic between these 2 VPCs. ...
Federico Nafria's user avatar
0 votes
0 answers
117 views

Multi-region internal, domain resolved static website hosted in S3

Statement I do have a website that has a single page application hosted in S3, and a web service hosted in AWS Lambda. To avoid cross-site requests, both share the same domain, and I route the ...
Luís Guilherme's user avatar
-1 votes
1 answer
95 views

Can I connect two vpc's with one site to site vpn in same region?

I currently have one site to site vpn connected to one vpc. I want to add a vpc here(It's the same region), but I want to connect the on-premise network connected through site to site vpn through site ...
john_smith's user avatar
2 votes
1 answer
313 views

Google Cloud App Engine with network peering

I'm trying to connect App Engine application to MongoDB Cloud over a peering connection. All services in my GCP are using non-default network called "main". I've setup peering connection ...
stkvtflw's user avatar
2 votes
1 answer
6k views

Why does an S3 to S3 copy care about VPCs? Related to error: "VPC endpoints do not support cross-region requests."

Goal: Get files from Bucket 1 in ca-central-1 in Account A to Bucket 2 in us-east-1 in Account B using the AWS CLI from a third machine using an the IAM role with correct S3 read and write ...
Ben Ogorek's user avatar
0 votes
1 answer
597 views

AWS VPC Peering vs PrivateLink for network access to 3rd party cloud database

AWS here. I have a simple app server that is running on EC2 instances that are in an autoscaling ("target") group that are fronted by an application load balancer (ALB). The ALB's domain ...
hotmeatballsoup's user avatar
0 votes
1 answer
337 views

Direct Traffic from a Pulbic ALB to an Internal ALB for EKS

So I have an EKS cluster sitting in a dedicated VPC (EKS-VPC) In my Main VPC I have a public-facing ALB that I want it to somehow direct traffic to services running in EKS. More specifically I want ...
argyrodagdileli's user avatar
0 votes
1 answer
78 views

PEERING connectivity issues between VPC's?

Could you help me with the network infrastructure below reference "PEERING" ? We have in GCP Cloud 2(two) VPC The First - "vpc-shared-nonprod" Projetc Name: "Shared" ...
Marcio Araujo's user avatar
0 votes
1 answer
135 views

In DataPrep, How to create connection with instance of sql without public ip on google cloud platform?

In Dataprep, when creating the connection there is the 'Test Connection' button, after filling in all the connection data, with the private ip, port, username and password, I click on the test button ...
Rafael Galle's user avatar
0 votes
0 answers
43 views

unable route traffic

unable to ping from one instance to another instance (Different AWS account) through VPC peering** As a part of learning I have created VPC peering between two different AWS account similar region 1....
Rajops369's user avatar
1 vote
2 answers
810 views

Restricting traffic between AWS VPCs

I have two VPCs: A and B. I want any node in A to be able to open a TCP connection to any node in B, but not the other way around. Any node in B must also be able to open outgoing connections to ...
Ralf's user avatar
  • 179
0 votes
0 answers
233 views

GCP VPN Tunnel is up, I can see Sent Bytes, but traffic is not reaching the recipient

I am trying to establish a VPN tunnel between a Classic CPN gateway and an on-prem VPN gateway. A requirement for the on-prem gateway is that traffic coming out of my VPN must present as a public ...
Paul's user avatar
  • 1
1 vote
0 answers
170 views

AWS VPC CIDRs in both 10.0.0.0/8 and 192.168.0.0/16

I have VPC A with CIDR 10.A.0.0/16 and VPC B with CIDR 10.B.0.0/16. I have VPC A and B peered and updated the route tables and from a server in 10.B.0.0/16 can ping a server in 10.A.0.0/16 and vice ...
Gangstead's user avatar
  • 111
1 vote
2 answers
63 views

I have created one vpc with three different subnets and I am facing issue while doing ssh from instances. getting check public key error

I have created one vpc with three different subnets and I am facing issue while doing ssh from instances. getting check public key error but succeed before. tarun@eu-vm:~$ ssh 192.168.0.3 Linux web-...
Tarun Tanwar's user avatar
0 votes
1 answer
556 views

Lambda with VPC long cold start

I have few lambda functions that are connecting to Mongo Atlas cluster. Connection between Mongo Atlas and my AWS account is done via VPC Peering. Lambda functions are attached to this VPC. I'm ...
krzysiexp's user avatar
0 votes
1 answer
540 views

connect Cloud SQL to Data Fusion through sqlproxy with private IP

It is my first question in this community I hope that I won't be off-topic. I'm trying to connect data fusion to Cloud SQL for MySQL Instance on Private IP. Here is what I have done so far: Creating ...
Simon Breton's user avatar
0 votes
0 answers
44 views

Route (other) third-party subnet via a different VPC

I have a multi VPC setup with the below subnets, one per VPC. 10.154.1.0/24 10.154.2.0/24 On the 10.154.2.0/24 subnet, there is a machine which serves routes for a 10.235.0.0/16 subnet as this host is ...
igloodan's user avatar
3 votes
1 answer
2k views

Cant create a "Serverless VPC Access" on Google Cloud

I am trying to create a "Serverless VPC Access" on Google Cloud. I have already done it before on another account to join Redis with CloudRun. This is an example of the configuration that I ...
Creature's user avatar
0 votes
1 answer
169 views

AWS VPC peering response traffic - can return address CIDRs overlap?

The AWS documentation on peering refers to the situation where VPCs B and C each have a subnet with an identical CIDR and which are both peered with VPC A, as per the diagram below: The documentation ...
John's user avatar
  • 293
0 votes
2 answers
326 views

VPC setup for (micro) services - shared vs. peering vs. one project - best practice

Somewhat related to this and this. This is a very basic and probably noob question. I want to set up a couple of services (mix of GCE, GAE, GCR and GCF) in the GCP (one org). Some of them need to ...
m02ph3u5's user avatar
  • 111
0 votes
1 answer
602 views

How to access a private zone via DNS peering

Let's say I have 2 projects (A, B), each with their own VPC and VPC peering enabled between them. Then I create a private DNS zone in project A, let's say with .internal as DNS name. Then I add an A ...
Rhangaun's user avatar
  • 189
1 vote
1 answer
640 views

GCP VPC Peering active, connectivity tests ok, but any request (ssh, icmp...) times out

I have 2 GCP projects with 2 different VPCs: VPC1 has the default subnet VPC2 has a default subnet and a custom subnet I then have 2 instances, one in each project: instance1 has one network interface ...
Vincent Teyssier's user avatar
1 vote
2 answers
222 views

Prevent data exfiltration in AWS via HTTP and FTP

I have a series of AWS accounts that are under one organizational entity. I want to prevent other users in my accounts from copying or sending data to an account that is not in my organization via ...
Jackson's user avatar
  • 113
0 votes
1 answer
489 views

AWS Client VPN to improve cross region performance

I have a Wordpress site on AWS in us-east-1. Due to business policies, I cannot use a CDN or multi-tenant. I have admins in Australia say the site is down or slow, but it's up for me, as well as isup....
aaaaaaaaaaa's user avatar
0 votes
0 answers
55 views

VPC Connectors does not work in Montreal (northamerica-northeast1)

Since yesterday our VPC connectors (from region northamerica-northeast1 to networks in the same region) have not been working. When I review the connector status it shows the message: The connector is ...
Mauricio Martin's user avatar
0 votes
1 answer
294 views

Can you have multiple active route tables in AWS?

I was trying to set up VPC peering in AWS. I got most of it working but the network connectivity didn't work. I narrowed down the difference to the routes. In my previous working system I had the ...
Archimedes Trajano's user avatar
0 votes
1 answer
378 views

Private IP connection Cloud SQL Google Cloud

In the google cloud docs it is clearly stated that connectivity to Cloud SQL using private IP can be established across regions, however it's not what I see at the moment. private access was enabled, ...
Eddie Jamsession's user avatar
3 votes
1 answer
2k views

How do I resolve a private DNS address from within an AWS Fargate task

I'm trying to setup a connection to a MongoDB Atlas database from an AWS Fargate container. The VPC peering is setup and works and I can successfully connect to the MongoDB Atlas cluster from a ...
Fergal Dearle's user avatar
0 votes
1 answer
1k views

How to troubleshoot network flows across peered VPC

I'm trying to accomplish this: https://cloud.google.com/vpc/docs/vpc-peering#global and it isn't working. Specifically, i'm trying to access an external server via a VPN on a peered network. My ...
tom's user avatar
  • 138
2 votes
1 answer
2k views

Connecting to VPC internal services from Google Cloud Shell

Is it possible to access services (like CloudSQL or some custom applications) that are running on internal IPs only (VPC) from cloud shell? The idea behind it, I want to keep Cloud SQL on private IPs ...
Igor Kopman's user avatar
1 vote
2 answers
2k views

Connecting Google Cloud Functions across Projects

I am using Google Cloud Functions and have multiple projects with cloud functions, that need to communicate with each other. My problem is that functions can only communicate with each other if they ...
WallyKaye's user avatar
1 vote
1 answer
89 views

Central VPN in a mulit-vpc architecture

I am designing a network flow for the following scenario - VPC 1 - hosting servers and apps in a private subnet VPC 2 - hosting servers and apps in a private subnet Management VPC (#3) - Hosting VPN ...
Nitin Rastogi's user avatar
1 vote
1 answer
1k views

What am I doing wrong with private GKEs peering and Cloud NAT?

I am trying to mount the following platform on Google Cloud: 2 private (native) GKE clusters, in 2 different VPCs and to give them access to the internet, each vpc has a Cloud Nat configurated. What ...
figarcia's user avatar
1 vote
2 answers
164 views

Cannot connect to Google Cloud Services on GCE instance using an external static IP Address

I‘m trying to connect to services hosted on Google Cloud, e.g. gcr.io (which is very important to me as my Docker images are hosted over there) via a GCE instance. Using an external static IP address ...
featMarcel's user avatar
0 votes
1 answer
748 views

Connect to active directory over peered VPC

I have a VPC(VPC1) where my main instances are running, and I have another one (VPC2)specifically for directory service (AD Connector) and a MS AD server running. I have created a VPC peering (which ...
serverstackqns's user avatar
1 vote
1 answer
449 views

google route peering as nexthop

Using the google cloud web interface for add a custom route with a peering as nexthop,But in this interface and in gcloud too, we can select only as next hop: --next-hop-address=NEXT_HOP_ADDRESS --...
c4f4t0r's user avatar
  • 5,411
2 votes
1 answer
650 views

Shared VPC and VPC Peering mix

On Google cloud, I have setup new three projects - dev, research and prod. So, then created an Shared VPC Host and three Service Projects as listed above. Also intend to have separate VPCs for each of ...
Rag K's user avatar
  • 21
1 vote
1 answer
654 views

How to make AWS resolves domain name to internal IP

I have a VPC peering established with MongoDB Atlas, however when I try to resolve the database cluster's domain from within an EC2 instance in the same VPC, I get back the public IP. This is a ...
Carlos H Romano's user avatar
0 votes
2 answers
271 views

Criteria for Determining How Many AWS VPCs to Use for Apps? Inter-VPC vs. Intra-VPC Traffic

I can't seem to find any specific guidance on what constitutes good practice with regards to the use of one VPC vs. many for application hosting. This link touches on the subject, but is quite old and ...
P Burke's user avatar
  • 183
1 vote
1 answer
8k views

Not able to access RDS instance inside EKS cluster | EKS <-> RDS connection

I'm trying to access my existing RDS instance in the newly created EKS cluster. steps I have followed: Create a VPC peering connection by keeping RDS as requester and EKS as accepter. Add destination ...
Saikat Chakrabortty's user avatar
1 vote
1 answer
505 views

Connection though VPC peering from VM to Kubernetes Service

I have 2 VPCs in GPC, the first one (VPC-1) running k8s cluster and the second running some VMs (VPC-2). I created a VPC peering between these 2 VPCs and I am able to connect from VM on VPC-2 to pod ...
DevOpsTech's user avatar
9 votes
5 answers
6k views

Cannot connect to Cloud SQL Postgres from GKE via Private IP

I am having trouble accessing a Cloud SQL instance running Postgres from a GKE cluster using the database's private IP. All the documentation I've found suggests using a VPC-enabled cluster to ...
Chathan Driehuys's user avatar
2 votes
1 answer
2k views

AWS Client VPN Access to a Peered VPC

In my AWS infrastructure there are a few VPC. 3 days ago I created Client VPN in VPC1, and successfully configured access to VPC2 according the instruction: https://docs.aws.amazon.com/vpn/latest/...
Nadia's user avatar
  • 113
1 vote
1 answer
2k views

ALB can't forward to NLB over VPC Peering Connection

I have an internet-facing ALB in VPC1 and an internal NLB in VPC2 The NLB is pointed at an ECS service and health-checks are healthy The ECS Task Security Group allows traffic from VPC1 CIDR as well ...
codeself's user avatar
  • 111
3 votes
1 answer
507 views

Terraform: using exportCustomRoutes when setting peering connection

I am trying to set-up a peering connection between 2 VPC networks. One network (the transit one) configures static routes, and I would like to have those propagated to the peered network. Here's an ...
Oliver's user avatar
  • 133
4 votes
1 answer
6k views

Cannot ping between EC2 instances in peered VPCs

I am trying to setup a barebones VPC connection within the same AWS account. VPC-A and Subnet-A have CIDR: 10.200.1.0/24 VPC-B and Subnet-B have CIDR: 10.200.2.0/24 Each VPC contains one EC2 ...
James Wierzba's user avatar
0 votes
1 answer
2k views

how do i get a vpc id from another account with terraform

I have an existing VPC in a separate account and am creating independent terraforms for more vpc's in new accounts. I wish to peer specific vpc's within each account but am finding it hard to ...
MattyG's user avatar
  • 1