Questions tagged [vpc-peering]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
51 views

What am I doing wrong with private GKEs peering and Cloud NAT?

I am trying to mount the following platform on Google Cloud: 2 private (native) GKE clusters, in 2 different VPCs and to give them access to the internet, each vpc has a Cloud Nat configurated. What ...
1
vote
2answers
48 views

Cannot connect to Google Cloud Services on GCE instance using an external static IP Address

I‘m trying to connect to services hosted on Google Cloud, e.g. gcr.io (which is very important to me as my Docker images are hosted over there) via a GCE instance. Using an external static IP address ...
0
votes
1answer
116 views

Connect to active directory over peered VPC

I have a VPC(VPC1) where my main instances are running, and I have another one (VPC2)specifically for directory service (AD Connector) and a MS AD server running. I have created a VPC peering (which ...
1
vote
1answer
56 views

google route peering as nexthop

Using the google cloud web interface for add a custom route with a peering as nexthop,But in this interface and in gcloud too, we can select only as next hop: --next-hop-address=NEXT_HOP_ADDRESS --...
1
vote
0answers
33 views

Shared VPC and VPC Peering mix

On Google cloud, I have setup new three projects - dev, research and prod. So, then created an Shared VPC Host and three Service Projects as listed above. Also intend to have separate VPCs for each of ...
0
votes
1answer
53 views

How to make AWS resolves domain name to internal IP

I have a VPC peering established with MongoDB Atlas, however when I try to resolve the database cluster's domain from within an EC2 instance in the same VPC, I get back the public IP. This is a ...
0
votes
2answers
33 views

Criteria for Determining How Many AWS VPCs to Use for Apps? Inter-VPC vs. Intra-VPC Traffic

I can't seem to find any specific guidance on what constitutes good practice with regards to the use of one VPC vs. many for application hosting. This link touches on the subject, but is quite old and ...
0
votes
0answers
33 views

How would I translate the following diagram into Google Cloud products and services?

I am currently in the early stages of beginning to learn about networking and cloud architecture and I was hoping someone could help explain to me how I could take the diagram below that shows a ...
0
votes
1answer
517 views

Not able to access RDS instance inside EKS cluster | EKS <-> RDS connection

I'm trying to access my existing RDS instance in the newly created EKS cluster. steps I have followed: Create a VPC peering connection by keeping RDS as requester and EKS as accepter. Add destination ...
1
vote
1answer
104 views

Connection though VPC peering from VM to Kubernetes Service

I have 2 VPCs in GPC, the first one (VPC-1) running k8s cluster and the second running some VMs (VPC-2). I created a VPC peering between these 2 VPCs and I am able to connect from VM on VPC-2 to pod ...
3
votes
3answers
1k views

Cannot connect to Cloud SQL Postgres from GKE via Private IP

I am having trouble accessing a Cloud SQL instance running Postgres from a GKE cluster using the database's private IP. All the documentation I've found suggests using a VPC-enabled cluster to ...
1
vote
1answer
231 views

AWS Client VPN Access to a Peered VPC

In my AWS infrastructure there are a few VPC. 3 days ago I created Client VPN in VPC1, and successfully configured access to VPC2 according the instruction: https://docs.aws.amazon.com/vpn/latest/...
0
votes
1answer
385 views

ALB can't forward to NLB over VPC Peering Connection

I have an internet-facing ALB in VPC1 and an internal NLB in VPC2 The NLB is pointed at an ECS service and health-checks are healthy The ECS Task Security Group allows traffic from VPC1 CIDR as well ...
1
vote
0answers
141 views

Terraform: using exportCustomRoutes when setting peering connection

I am trying to set-up a peering connection between 2 VPC networks. One network (the transit one) configures static routes, and I would like to have those propagated to the peered network. Here's an ...
2
votes
1answer
532 views

Cannot ping between EC2 instances in peered VPCs

I am trying to setup a barebones VPC connection within the same AWS account. VPC-A and Subnet-A have CIDR: 10.200.1.0/24 VPC-B and Subnet-B have CIDR: 10.200.2.0/24 Each VPC contains one EC2 ...
0
votes
1answer
306 views

how do i get a vpc id from another account with terraform

I have an existing VPC in a separate account and am creating independent terraforms for more vpc's in new accounts. I wish to peer specific vpc's within each account but am finding it hard to ...
5
votes
1answer
1k views

How to configure cross region VPC peering on AWS with Terraform

I'm trying to create a terraform configuration to spin up multiple VPCs in different regions and create VPC peer connections between them. This is my module for the VPC # Required Variables ...
0
votes
1answer
55 views

Connecting two AWS VPCs in different regions

I have 2 VPC's in different regions (Virginia and Ohio) They both have IP ranges of: 172.31.0.0/16 Do I need to change the IP ranges of one region? How would I do that if I already have servers ...
0
votes
1answer
1k views

How to make GKE Services visible to another GKE cluster running in a different VPC

I am struggling to make Services become visible though peered VPC. I have two GKE clusters (cluster-A and cluster-B) each of then in a different VPC. I've created a VPC network peering connecting ...
0
votes
1answer
168 views

Forward from VPN to non-VPN network

I want to connect an existing Kubernetes cluster to remote VPN that uses only a specific subnet IP range. I could create a custom-mode VPC network within my project that only has the appropriate ...
0
votes
1answer
64 views

How can I send/generate traffic in GCP?

I'm using GCP for building a simple scenario. I set 3 VMs in deferent locations in a default VPC. I would like to send/generate traffic in order to use VPC flow logs, but I don't know how to do that.
4
votes
1answer
2k views

Issue Connecting to Cloud SQL Postgres using Private IP from GKE

Steps I have followed: 1. Create VPC network gcloud compute networks create stg-vpc \ --subnet-mode custom 2. Create IP range for VPC Peering for this network gcloud beta compute addresses ...
0
votes
2answers
1k views

Google Cloud Platform VPN and multiple projects

Is it possible, and does it make sense, to route traffic for multiple GCP projects through a single project back to my head office over VPN? Before I get too far down the rabbit hole the idea was to ...
0
votes
1answer
2k views

Google Cloud VPC network peering - DNS not shared?

I've got two VPC Networks: A B They are linked with eachother trough VPC network peering. Machines from network A can reach machines from network B just fine via IP. However, they are not capable ...
0
votes
1answer
1k views

Connecting from an AWS Lambda function or service within a VPC to a customer's private network over VPN tunnel

We are currently running AWS Lambda functions within a VPC and for example already have a peering connection setup to MongoDB Atlas to have our AWS Lambda's within the VPC communicate to our MongoDB ...
0
votes
1answer
159 views

How can you connect two Amazon VPCs through VPC peering if they are already configured with the network IPs?

According to AWS documentation you can connect up to 50 VPC through VPC peering but you have to make sure there's not IP overlapping so my questions here are: How can you come up with so many ...
0
votes
2answers
743 views

How to route traffic from host in VPC via host in different VPC

tl;dr Is there any way to route traffic from 172.20.0.100 to 200.0.0.100 in the diagram via 10.0.0.6 ? I have a setup where we have an existing AWS VPC (172.20.0.0/16) with a number of hosts in it. ...
1
vote
1answer
605 views

AWS VPC Peered - RDS accessing Active Directory Service

I have two aws accounts and I could establish a peering of two VPCs belonging to each account. Also, I was able to launch an EC2 instance one account joining to the AD domain on the other account. The ...
0
votes
1answer
75 views

Issue connecting EC2 instances in 2 separate VPCs (same region)

I have 2 VPCs (default and special) each hosting 1 EC2 instance. Both instances have the same security group (say name = internal). The security group allows All Traffic from internal (a circular ...
0
votes
2answers
2k views

Google Cloud routing with VPCs peered in a partially connected mesh topology

we are dividing our Google Cloud infrastructure into multiple projects, each with it's own VPC. We have one central VPC, let's call it vpcA, to which we connect via pritunl VPN and site-to-site tunnel ...
0
votes
0answers
257 views

How an Ec2 node can contact eni of a different node in different AWS account and vpc

I have a requirement that one of my EC2 instance's originating traffic to a specific ip address needs to land to a ENI of a different EC2 instance which is present in different account and different ...
1
vote
1answer
654 views

Solving the mystery - VPCs have overlapping IPv4 CIDR blocks

In AWS, When I try to create a peering connection I get this following error Failed due to incorrect VPC-ID, Account ID, or overlapping CIDR range I am not savvy with the networking and wonder how I ...
0
votes
1answer
129 views

Is it possible to share same AWS Elastic IP addresses between two and more VPC?

I have "VPC-A" with NAT and attached Elastic IP address. Couple of services are running inside under load and couldn't be easily moved. Also I have "VPC-B" with own NAT for subnet and, of course, ...
0
votes
1answer
779 views

AWS VPC peering using security groups

I setup a VPC peering connection between two regions (us-west-2, eu-central-1) in a single AWS account. In the documentation I see: You cannot reference the security group of a peer VPC that's in a ...
1
vote
1answer
445 views

SSH connection between two server after VPC Peering

I am trying to configure SSH connection between two server on two different VPC on my same account. VPC1: vpc-ba8ce8d2 172.31.0.0/16 rtb-576e373f acl-0dbefa65 VPC2: vpc-0c5fc020e4f30283d 10.0.0.0/...
0
votes
2answers
952 views

Does AWS RDS read replication require peering?

If you create an RDS instance in one region with a read replica in another (in private VPCs, no public access), is it required to peer the private VPCs for replication to occur or does AWS magically ...
0
votes
0answers
110 views

Unable to Resolve Machine Names via Domain Controller

I have two Amazon AWS VPC's connected via a peering connection, where I have enabled DNS resolution between them like so: I am also using an internal domain controller to provide DNS using the AWS ...
0
votes
1answer
408 views

Routing on an AWS OpenVPN multi-VPC + ClassicLink

I am having trouble connecting between servers in a multi-region network I’m setting up in AWS, as not all servers are able to be reached from any point in the network. I’m connecting a VPC (A) in ...
2
votes
2answers
761 views

Route traffic between a VPC in one region to a VPC in another region

In order to allow instances in a VPC in Oregon (us-west-2) to contact instances on another VPC in Ireland (eu-west-1), I've installed OpenSwan gateway machines on both regions and established an IPSEC ...
0
votes
1answer
1k views

server can't find 2.0.9.10.in-addr.arpa: NXDOMAIN

I have set up a VPC peering between two different project's VPC on GCP and it works fine when i ping my vm-instance and i'm also able to ssh to my instance with private ips. However, if I query it ...
4
votes
1answer
3k views

How to connect instances in different AWS accounts by private IP?

Say I have accounts A and B and light sail instances a and b in each account. a and b are in the same region and zone. Is it possiple for a and b to interconnect with private IP? For example, after I ...
0
votes
2answers
547 views

Private RDS in VPC, connect from EC2 in different VPC and region

I want to connect from a EC2 in US VPC to a private RDS in a EU VPC. The AWS docs don't seem to mention this scenario - does anyone know if it's possible? Thanks,
0
votes
1answer
754 views

VPC peering sharing security group ingress rules

If I have VPC1 with security group (sg-aaaaaaaa) that allows ssh access from source 10.10.10.10/32 and I peer VPC1 with VPC2 that has a security group (sg-bbbbbbbb) that allows ssh access from source ...
1
vote
1answer
1k views

Connecting multiple VPCs with the same CIDR block to a shared VPC

In my company's AWS cloud we have 4 VPCs, one for each of our major API environments (dev, test, stage, prod). In order to make these environments as similar as possible to each other they all have ...
0
votes
1answer
2k views

aws vpc to vpc connection with openvpn

I have a 2 VPC's in us-east-1(VPC1 and VPC2) and are VPC peered. I run openVPN in VPC1 to connect to both the vpc. Now I had to make 2 new VPC's in ap-southeast-1(VPC3 and VPC4) again both are VPC ...
1
vote
0answers
637 views

cannot ping ec2 in another vpc through peer connection

I have multiple VPC's set up, A, B and X. I have a peered connection between A & X and between B & X, X is the Peered VPC in both cases. I have added the CIDR Blocks for A & B to the ...
2
votes
1answer
2k views

Forwarding traffic from AWS ELB to another ELB

I have 2 VPCs (X and Y). We have a vpc peering connection between the two. In VPC X, we have a CNAME that needs to resolve to an ELB in VPC Y. Is there any way to make an ELB in VPC X forward traffic ...
1
vote
1answer
789 views

VPC peering: Accessing a resource in public subnet from a public subnet through peering connection issues

I have set vpc peering between these VPCs (vpc-1 and vpc-2). I have my RDS in vpc-1 in this subnets (10.13.1.0, 10.13.2.0, 10.13.3.0) with this route rtb-vpc1-rds. In the second VPC and two subnets : ...
1
vote
2answers
2k views

AWS Active Directory: Cannot access from another VPC

I've setup an Active Directory service in AWS in 2 private subnets in a VPC. I have another VPC in the same account that I want to be able to access the AD from. However for some reason it just isn't ...
1
vote
0answers
186 views

Cross region VPC/VPN not routing to peered VPC

I've setup IPSEC tunnels between 3 management VPCs in 3 distinct AWS regions. Each of those regions has additional VPCs (dev/prod) that are peered to the management VPCs. It's setup in a hub/spoke ...