AWS Transit Gateway | Concept | Demo - Implementation of Transit gateway

[@aayushsood1221]

The same question was asked to me in an interview, i had only idea about vpc peering then searched and found your video, it's really awesome. You have explained the concept really well. Thanks for the video.

[@Cloud4DevOps]

Glad it helped !!!

[@vickyvky6527]

Crystal clear explanation dude.. thanks..

[@Cloud4DevOps]

Glad it helped!

[@TheLablujan]

Great video, much better explained than others around YT

[@Cloud4DevOps]

Glad you think so!

[@David-jf4ee]

As always, awesome!

[@Cloud4DevOps]

Thank you! Cheers!

[@vinayveerabhadra7280]

Thanks a lot Sir. This video helped me so much in understanding the TGW concept and how to implement it.

[@Cloud4DevOps]

Great to hear! Please share the channel among your circle... Thanks

[@nenyiebo7022]

Terrific!!!! good job #LGTICW

[@Cloud4DevOps]

Thanks for the feedback !!!

[@gangwang9337]

very good explanation with a simple demo. very appreciate your work

[@Cloud4DevOps]

Glad it was helpful!

[@subhadeepsinha4182]

I have a internal elb that routes traffic to ec2 instances on private subnet in say vpc1 of region1. The same setup is done in another vpc on another region( say vpc2 on region2) Now, i have created a private hosted zone on vpc3 on say region1....but it wont be able to access the domain as elb is internal....so, can i use transit gateway to establish a connection between vpc3,vpc1 and vpc2,vpc1 such that it can access the internalelb on vpc1 and vpc2 from vpc3 and get the response from the webserver? I was actually trying to loadbalance my application across regions without traffic hitting the internet.

[@Cloud4DevOps]

it should work internally ..

[@vrrasann]

thanks for the explaining concepts

[@Cloud4DevOps]

Glad it was helpful!

[@haivarun]

Excellent explanation, much helpful, thank you !!

[@Cloud4DevOps]

Glad it was helpful!

[@rajaguru5109]

Good explanation with hands on..

[@Cloud4DevOps]

Thanks for keeping the focus..

[@harry.warraich1]

Thanks for explaining the TGW. Are you going to cover the propagation and association in a different video ?

[@Cloud4DevOps]

Not a separate video.. Association is where network traffic is initiated from(Source), but we don't use an IP Address CIDR block to define the source location, it is simply the name of the VPC or VPN Attachment. and When an attachment is propagated to a transit gateway route table, these routes are installed in the route table. For a VPC attachment, the CIDR blocks of the VPC are propagated to the transit gateway route table. Hope that clears the concept..

[@prabhucharan3192]

why you use 10.0.0.0/8 on vpc route table for routing vpc to transit gateway (please help)

[@Cloud4DevOps]

Its nit necessary to use wider CIDr range , you can use your VPC CIDR to open up the communication.. I just showed as an example.

[@prabhucharan3192]

@@Cloud4DevOps sir thank u so much for your valuable reply, sir i don't know much about ipv4-subnetting what my understanding in the above example is any request from ec2 instance with class A 10.0.0.0/8 must go via transit gateway

[@Cloud4DevOps]

Thats quite correct if we use , as i have open up whole range within internal network while using transit gateway. Please make sure you use VPC CCIDR block for best practices..

[@swaroopkishan5031]

thank you for making a video on tgw...

[@Cloud4DevOps]

Another video on TGW with VPN setup is out..kzbin.info/www/bejne/nX2vmpt3htmdn7c

[@AjeetSingh-hk5pm]

Hey I have 3 vpc these vpc have same subnet and i am not able to communicate with vpc peer but can we do it with TGW on this.

[@Cloud4DevOps]

With best practices you cannot have same CIDR range for all VPCs. Correct me if i am wrong.

[@AjeetSingh-hk5pm]

@@Cloud4DevOps I agreed but if we have same cidr in different region vpc and i want to communicate with each other than how can do that, like i can give you one example we have security too which is running in security vpc and we need to install security agent in different vpc and agent want talk to security vpc from different vpc across the region but we have same cidr from these vpc or i can say security vpc have different cidr but other vpc have same cidr than how can i achieve this.

[@Cloud4DevOps]

VPC peering doesn't support overlapping IPv4 CIDR blocks. You can try transit gateway where you have to create a intermediary VPC which will talk to both VPCs of same CIDR block and acting as communication media from transit gateway. Also if this is multi region then use inter region peering..

[@AjeetSingh-hk5pm]

@@Cloud4DevOps Can you please suggest me the doc or youtube link to implement theses things.

[@Cloud4DevOps]

I dont have any specific doc or link as this comes under out of way configuration and i have doubt anyone has done that before. Configuration is quite simple and if you have the configuration from TGW side before you will be able to achieve this objective easily..

[@vishalpadwal2007]

I want to implement Hub and Spoke topology with Transit Gateway..Need to speak with you..have some queries on Bandwidth rate-limiting to every spoke, pricing etc..how I can reach you.

[@Cloud4DevOps]

You can send message on my linkedin for your query. www.linkedin.com/in/shashankabhishek/

[@sathishmamidala5049]

Hi, thanks, well explained, can we have cross account VPCs with TGW, let me know

[@Cloud4DevOps]

Yes you can..

[@krishnainampudi9748]

Hi Thanks very much for the video on transit gateway, can you please explain IP 10.0.0.0/8 belongs to

[@Cloud4DevOps]

Thanks. Thats a wide block range consisting of all IPs :- 16777216 host. This can be designed based upon our requirement with like tightened security. I have just taken an example to show the work within that range. Let me know if thats helps.

[@krishnainampudi9748]

@@Cloud4DevOps Thanks for quick reply. Got it, I am trying a similar setup with openvpn and vpc as end points, I am struck at configuration opening the tunnels.

[@Cloud4DevOps]

You might have to check the configuration setup which you are trying to do with OpenVPN , it seems something misconfigured.

[@markyboi01]

Hi, Thanks for sharing the video. I have a concern regarding the how you configured the route table for each VPC. My guess is that, instead of using a random 10.0.0.0/8 pointing to the transit gateway. It should be the Cidr range for the other VPCs that should be pointing to the transit-gateway

[@Cloud4DevOps]

Its not necessary to use 10.0.0.0/8 , you have to make sure the both route from VPCc to TGW and TGW to VPC needs to be open correctly , then only you will be able to have communication. Let me know if that clarifies..

[@sreedevvarma456]

@@Cloud4DevOps Yup i do agree but 10.0.0.0/8 also opens other unwanted CIDR ranges to TGW right? Correct me if i'm wrong.

[@Cloud4DevOps]

@@sreedevvarma456 Thats correct .. We have to use specific CIDR which are relevant to us. I just showed the way of configuration and rest it depends on requirements.

[@fisherlee3262]

I guess it is kinda randomly asking but do anyone know of a good place to stream new tv shows online?

[@izaiahcaleb1212]

@Fisher Lee Lately I have been using flixzone. You can find it by googling :)

[@premsoni0143]

Nicely explained. Transit gateway seems same as CEN in Alibaba Cloud. Right?

[@Cloud4DevOps]

With initial impression on CEN seems yes kind of similar to aws transit gateway. It seems with alibaba we need to purchase bandwidth package first while connecting to different regions..

[@premsoni0143]

@@Cloud4DevOps If connection between same region then it's free, for different regions then need to buy

[@Cloud4DevOps]

thanks good to know..

[@OsloOdyssey]

Link to video for VPN part ( on-prem to AWS connectivity)

[@Cloud4DevOps]

I dont have on prem setup with me , VPN tunnel setup with transit gateway can be found in AWS Networking playlist only.. TGW. VPN setup:- kzbin.info/www/bejne/nX2vmpt3htmdn7c

[@vivekcloud7657]

can you send me playlist of TGW Please

[@Cloud4DevOps]

If you go the network playlist yo will see all videos related to TGW.. thanks

[@Googlepaynnn]

Then no need of AWS peering? Can you please explain when this peering to use and when Transit Gateway use. Thank you

[@Cloud4DevOps]

Its not like peering is not needed. Depends on how each company operates.. TGW comes with better feature and network bandwidth.

[@Googlepaynnn]

@@Cloud4DevOps thanks for the reply, if possible can you please give me the 2 examples when these 2 uses simple also fine, Thanks you once again for the reply

[@rajannishad84]

Hi I configured but not able to connect

[@Cloud4DevOps]

It depends what you have missed on configuration side.