AWS re:Invent 2017: Networking Many VPCs: Transit and Shared Architectures (NET404)

[@ikaikaboo]

Nick's presentations are a 'must-see' at re:Invent every year.

[@TiagoAlmeida]

Really great presentation. There are lots to take from this.

[@worldexplorer796]

Fully satisfied with the whole video. Nicely presented

[@Pheagey]

The big Lebowski reference around 51 minutes is great.

[@dragonknight320]

Very good, The video is very useful information :)

[@fucksqueed]

No need to use full mesh AWS VPN, just use DMVPN with CSR over the VPC peering...with Transit VPC being the Hub....

[@jimgrill]

I thought there was a new feature that allows you to choose the CIDR used in VPN connections rather than "roll the dice" on the local link range (169.254.0.0/16 or whatever is used). Is that true? ...and then I watched a few more minutes of the video and he covered it. It's true. Doh!

[@francistony7110]

51:32 is a little confusing.... are are u saying that if two endpoint with same IP address across from different VPC can access same resource on shared services VPC via private LINK.. how will the return traffic be handled????

[@naveenkerati]

Why not the Datacenter Gateway acts as a transit gateway or a transit router..?

[@PHotelDupont]

How do you download Nick's presentation?

[@pulsebmee]

www.slideshare.net/AmazonWebServices/networking-many-vpcs-transit-and-shared-architectures-net404-reinvent-2017

[@MohamedAbdo-bd7ge]

In vpn over AWS direct connect (minute 22) your created vpn over private virtual interface , this is not correct, vpn connection can only be setup over public virtual interface

[@pulsebmee]

That's not true since the CSRs are terminating the VPN and they reside in the private IP address space. If you were using the VGW then you would have to use a public VIF though.

[@alfianabdi35]

@@pulsebmee is that also the case for other vpn appliances? such as palo alto vm series or juniper vsrx?

[@pulsebmee]

@@alfianabdi35 Yes, there's nothing specific about that configuration to the CSR

[@michaelvandeborne9382]

Meanwhile in Azure, people just peer vNets. Takes 10 sec. Costs nothing. Allows transitive routing.

[@rerosavm]

is this true?....

[@jonrambo7844]

@@rerosavm Yes

[@wysefavor]

acloud guru asked me to watch this....long video