AWS hybrid connectivity services - Hybrid Connectivity

AWS hybrid connectivity services

The AWS network services provide an abstraction layer to highly scalable and available networking components. They play an essential role to enable and facilitate building hybrid networking solutions. At the time of this whitepaper writing, there are three primary service endpoints:

  • AWS Virtual Private Gateway (VGW) is a regional service, that is highly available, in that it contains a redundant component within a VPC across multiple Availability Zones. It offers distributed IP routing and forwarding at the VPC level. In other words, it acts as the gateway for the VPC to communicate with your remote networks such as on-premises networks. VGW is capable of terminating AWS Site-to-Site VPN connections as well as Direct Connect private virtual interfaces (VIF).

  • Direct Connect gateway (DXGW) is a globally available resource. You can create the DXGW Direct Connect gateway in any public AWS Region and access it from any other public AWS Regions (except the Beijing and Ningxia Regions in China). A Direct Connect connection can be linked to an AWS DXGW via private or transit VIF. DXGW can be associated with either VGW (directly to a VPC) or can be associated with AWS Transit Gateway.

  • AWS Transit Gateway is a highly available and scalable regional service that enables you to connect VPCs and on-premises networks through a central hub over Site-to-Site VPN and/or Direct Connect. Conceptually, an AWS Transit Gateway acts like a virtual cloud router. AWS Transit Gateway is highly available by design. It is built on AWS Hyperplane, the Network Function Virtualization platform that underpins many other AWS services, like Network Load Balancer and NAT Gateway. To learn more about the AWS Hyperplane, see the AWS re:Invent session, Another Day, Another Billion Flows. Because it is a logical object, AWS Transit Gateway provides a centralized abstraction layer, where you can create and manage connectivity rules and routing control, which helps to simplify the manageability of the network solution. AWS Transit Gateway enables you to scale your connection throughput with equal cost multi-path (ECMP) routing support over multiple Direct Connect connections or Site-to-Site VPN tunnels. For some common use cases see AWS Transit Gateway examples.