Cost - Hybrid Connectivity



In the cloud, the cost of hybrid connectivity includes cost of provisioned resources and usage. Cost of provisioned resources is measured in units of time, such as hourly. Usage is for data transfer and processing, usually measured to in gigabytes (GB). Other costs includes the cost of connectivity to the AWS network point of presence. If your network is within the same colocation facility, it might be as little as the cost of a cross connect. If your network is in different location, there will be a service provider and/or Direct Connect partner costs involved.

Impact on design decisions

Organizations try to maximize efficiency and reduce cost. An optimal hybrid connectivity solution has to meet business and technical requirements at the lowest cost possible. If connectivity is provisioned with just enough bandwidth to meet requirements, it optimizes for current cost. However, it might be hard and costly to scale the connectivity if requirements change. Another aspect to consider is that at-scale, private connectivity can often be cheaper even with the higher cost of provisioned resources, including service provider cost. This is because data transfer cost per GB over Direct Connect is cheaper than over the internet. For example, if you have bandwidth-heavy workloads that you want to run on AWS, Direct Connect reduces your network costs into and out of AWS in two ways. First, by transferring data to and from AWS directly, you can reduce your bandwidth commitment to your internet service provider. Second, all data transferred over your dedicated connection is charged at the reduced Direct Connect data transfer rate rather than internet data transfer rates.

With AWS, you can elastically adjust your usage up and down. If you are using a network service provider for connectivity between on-premises and a Direct Connect location, your ability to change your bandwidth commitments is based on your contract with the service provider. AWS can deliver your traffic to any AWS Region, except China, from any AWS network point of presence using AWS backbone. This capability has many technical benefits over using just internet to access remote AWS Regions. There is a data transfer cost premium for using AWS backbone. If there is an AWS Transit Gateway in the traffic path, it adds data processing cost per GB.

Finally, AWS charges for data egress with hybrid connectivity solutions. Optimal application design keeps data processing within AWS and minimizes unnecessary data egress. Data ingress to AWS is free. This means that any use case that sends a lot of data to AWS is very economical from the data transfer cost perspective.

Note: As part of the overall connectivity solution, in addition to the AWS connection cost, you should also consider cost of the end-to-end connectivity. This includes service provider cost, cross connects, and racks and equipment within a Direct Connect location (if required).

Requirement definition

  • How much data do you anticipate to send to AWS per month?

  • How much data do you anticipate to send from AWS per month?

  • Is this connectivity temporary or permanent?

Technical solutions

If you are not sure whether you should use internet or private connectivity at this point, calculate a breakeven point before Direct Connect becomes cheaper than using internet. If the volume of data means that Direct Connect is cheaper, and you require a permanent connectivity, Direct Connect is the optimal connectivity choice.

If the connectivity is temporary and internet meets other requirements, it could be cheaper to use AWS Site-to-Site VPN over internet due to elasticity of the internet. This choice assumes that you have sufficient internet connectivity in your on-premises network.

If you are within a facility that has Direct Connect, you can establish a cross connect to AWS. This means using a dedicated connection that comes at fixed sizes. Direct Connect partners offer further bandwidth granularity and smaller sizes, which could optimize your connectivity cost. For example, you can start at 50Mbps hosted connection vs 1Gbps dedicated connection.

With AWS Transit Gateway you can share your VPN and Direct Connect connections with many VPCs. While you are charged for the number of connections that you make to the AWS Transit Gateway per hour and the amount of traffic that is processed by the AWS Transit Gateway, it simplifies management and reduces number of VPN connections and VIFs required. Lower operational overhead yield benefits and cost savings that can easily outweigh the additional cost of AWS Transit Gateway data processing. Optionally, you can consider a design where AWS Transit Gateway is in the traffic path to most VPCs but not all. This approach avoids the AWS Transit Gateway data processing fees for use cases where you require a transfer of very large amounts of data into AWS. For more information, see Connectivity Models.

Another approach is to combine Direct Connect as a primary path and use AWS Site-to-Site VPN over the internet as backup and failover path. While technically feasible and cost effective, this solution has technical challenges, discussed in Reliability, and can be difficult to manage. AWS does not recommend it for highly critical workloads.

The last approach is a customer-managed VPN or SD-WAN deployed in Amazon EC2 instances. Compared to AWS Site-to-Site VPN, this approach can be cheaper at scale if many tunnels, each with low-bandwidth needs, are required. There is also a management overhead, the cost of licensing, and the cost of EC2 resources for each virtual appliance to consider.

Category Customer-managed VPN or SD-WAN AWS S2S VPN AWS Accelerated S2S VPN AWS Direct Connect Hosted Connection AWS Direct Connect Dedicated Connection
Requires customer internet connection Yes Yes Yes No No
Provisioned resources cost EC2 instance and software licensing AWS S2S VPN AWS S2S VPN and AWS Global Accelerator Applicable capacity slice of port cost Dedicated port cost
Data transfer cost Internet rate Internet rate or Direct Connect rate Internet with data transfer premium Direct Connect rate Direct Connect rate
Transit Gateway Optional Optional Required Optional Optional
Data processing cost N/A Only with AWS Transit Gateway Yes Only with AWS Transit Gateway Only with AWS Transit Gateway
Can be used over AWS Direct Connect? Yes Yes No N/A N/A

Table 1 – Cost effectiveness comparison