{"id":4291,"date":"2022-04-01T13:58:00","date_gmt":"2022-04-01T11:58:00","guid":{"rendered":"https:\/\/blog.besharp.it\/?p=4291"},"modified":"2022-04-01T14:46:53","modified_gmt":"2022-04-01T12:46:53","slug":"hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn","status":"publish","type":"post","link":"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/","title":{"rendered":"AWS Direct Connect with AWS Site-To-Site VPN as a failover"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Introduction<\/h2>\n\n\n\n<p>Today, many solutions require approaches that implement a joint use of public cloud providers and their own on-prem resources. In this series of articles, we provide an overview of useful AWS services to build a hybrid network that seamlessly extends workloads from local installations to the public cloud according to business needs.&nbsp;<\/p>\n\n\n\n<p><br>In some scenarios, hybrid cloud networks rely on <strong>AWS Direct Connect (DX)<\/strong>. This service provides another option rather than the public internet to connect to AWS by delivering data through a <strong>private network connection<\/strong> <strong>between<\/strong> the <strong>on-premise facility<\/strong> and <strong>the AWS cloud<\/strong>.&nbsp;<\/p>\n\n\n\n<p>If you like to know more about Direct Connect, please check our <a href=\"https:\/\/blog.besharp.it\/how-to-wisely-choose-the-right-aws-direct-connect-for-your-hybrid-cloud-environment\/\" target=\"_blank\" rel=\"noreferrer noopener\">previous blog post<\/a>. It explains what it is and how to choose it regarding some specific needs.<\/p>\n\n\n\n<p>In some cases, this connection alone is not enough. It is always better to guarantee a <strong>fallback connection<\/strong> as the backup of DX. There are several options, but implementing it with an <strong>AWS Site-To-Site VPN<\/strong> is a real cost-effective solution that can be exploited to reduce costs or, in the meantime, wait for the setup of a second DX.<\/p>\n\n\n\n<p>Please bear in mind that this solution does not ensure an SLA, and it is impossible to obtain it with a connection over the public internet.&nbsp;<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">High-Level Architecture<\/h1>\n\n\n\n<p>This article will progress on what has already been put in place in the <a href=\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-centralized-nat-gateway-through-aws-transit-gateway\/\" target=\"_blank\" rel=\"noreferrer noopener\">previous article (Hybrid Cloud Networking: centralized NAT Gateway through AWS Transit Gateway)<\/a>. We presented how to set up a Transit Gateway and share network appliances between AWS Accounts. So, please, it might be helpful to read it first to fully understand what will be explained here.&nbsp;<\/p>\n\n\n\n<p>Let&#8217;s assume that a fictitious company currently wants to connect its own on-premises facilities with the AWS Accounts directly to a DX connection by using a VPN Site-To-Site as a backup.<\/p>\n\n\n\n<p>Before proceeding, it is required that a Direct Connect has been already requested and ordered. Plus, the whole AWS networking has been centralized through Transit Gateway.<\/p>\n\n\n\n<p>As shown below, the connection between the local facility and AWS through the Direct Connect private connection can be configured by directly attaching the DX to the AWS Transit Gateway.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"470\" src=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image1-2-1024x470.png\" alt=\"\" class=\"wp-image-4292\" srcset=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image1-2-1024x470.png 1024w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image1-2-400x184.png 400w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image1-2-768x352.png 768w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image1-2.png 1371w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Let&#8217;s dive in:&nbsp;<\/strong><\/p>\n\n\n\n<p>Direct Connect offers a location over a standard Ethernet fiber-optic cable. One end is connected to the on-prem router, and the other to the AWS DX router. A user can associate it directly with the Transit Gateway through the <strong>Transit Virtual Interface (VIF)<\/strong>. This specific interface is different from the private\/public interface because it is linked directly with the Transit Gateway. This enables connectivity to all VPCs that share an attachment.&nbsp;<\/p>\n\n\n\n<p>Be careful! <a href=\"https:\/\/docs.aws.amazon.com\/directconnect\/latest\/UserGuide\/limits.html\">Please note that it is possible to attach only 1 transit virtual interface for DX dedicated connection. This limit cannot be increased.&nbsp;<\/a><\/p>\n\n\n\n<p>After the setup has been done, the company wants to use the <strong>site-to-site VPN <\/strong>as a backup. It consists of an encrypted link, called VPN tunnel, that connects the on-prem site with AWS. Each VPN connection includes two VPN tunnels which can simultaneously be used for <em>high availability<\/em>.&nbsp;<\/p>\n\n\n\n<p>In our case, the two endpoints will be the Customer Gateway (CGW) for the on-prem side and the Transit Gateway for the AWS one.<\/p>\n\n\n\n<p>Please note that VPN has a couple of limits that must be taken into account in this design:<\/p>\n\n\n\n<ul><li>Maximum 50 Site-to-Site VPN connections per AWS Region.<\/li><li>Maximum bandwidth per VPN tunnel, up to 1.25 Gbps.<\/li><\/ul>\n\n\n\n<p>The modified scenario will look like this:<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"353\" src=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image2-2-1024x353.png\" alt=\"\" class=\"wp-image-4294\" srcset=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image2-2-1024x353.png 1024w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image2-2-400x138.png 400w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image2-2-768x264.png 768w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image2-2-1536x529.png 1536w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image2-2.png 1943w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>With this improved configuration, the traffic will flow through Direct Connect and, when a <strong>failure happens<\/strong> on the <strong>DX<\/strong>, the traffic will be switched to the failover <strong>VPN Channel<\/strong>. The purpose of using DX as the<strong> primary active path<\/strong> is that it guarantees:<\/p>\n\n\n\n<ol><li>High speed up to 100 Gbps (not in every Region)<\/li><li>Bypassing public internet and so network congestion and unpredictability.<\/li><\/ol>\n\n\n\n<p>The entire routing behavior and the failover mechanism is managed by the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Border_Gateway_Protocol\" target=\"_blank\" rel=\"noreferrer noopener\">BGP protocol<\/a>, and it&#8217;s a constraint for the customer gateway router to support it. The router will send various keepalive packets to check if the DX path is active, and if a failure is detected, the path is switched to the fallback one (VPN). In fact, BGP dynamic routing is directly controlled by the Customer Gateway. The CGW, whether software or a physical appliance, must be configured appropriately by the network administrator to exchange routing information among the various routers. It works by managing a table of IPs (called prefixes) that provides information on the reachability of the different networks we&#8217;re observing. Then, BGP is responsible for exchanging IP blocks advertisement (IP prefixes) to the various systems.<br>But if BGP is advertising prefixes, how are the <strong>priorities<\/strong> of the routes managed by AWS? Well, to understand it better, let\u2019s shift the focus on the Transit Gateway and resume them in a table:<\/p>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"527\" src=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Screenshot-2022-04-01-at-14.40.24-1024x527.png\" alt=\"\" class=\"wp-image-4327\" srcset=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Screenshot-2022-04-01-at-14.40.24-1024x527.png 1024w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Screenshot-2022-04-01-at-14.40.24-400x206.png 400w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Screenshot-2022-04-01-at-14.40.24-768x395.png 768w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Screenshot-2022-04-01-at-14.40.24.png 1348w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n\n<p><\/p>\n\n\n\n<p>Hence, to have our infrastructure in place, it is necessary to <strong>advertise the same prefix<\/strong> for both the <strong>Direct Connect (VIF)<\/strong> and the <strong>VPN<\/strong>, because if the CGW is advertising the same routes toward the AWS VPC, the Direct Connect path is always preferred, regardless of AS path prepending.<\/p>\n\n\n\n<p>Please, by considering the table\u2019s point 3, be careful when configuring the VPN Site-To-Site. Inside the VPN wizard form, a user must specify <strong>&#8220;Dynamic&#8221;<\/strong> as <strong>Routing Option, <\/strong>otherwise all the reasoning would fall.<\/p>\n\n\n\n<p>Sometimes, a scenario of asymmetric routing might occur with this kind of configuration. <strong>Asymmetric routing<\/strong> means that a package traverses from a source to a destination in one path and takes a different path when it returns to the source.<em> i.e., traffic from AWS to on-premise might flow through the Direct Connect link, but for the opposite, the traffic might traverse the VPN tunnel instead.<\/em><\/p>\n\n\n\n<p>To solve this issue, please consider this <a href=\"https:\/\/aws.amazon.com\/it\/premiumsupport\/knowledge-center\/direct-connect-asymmetric-routing\/\" target=\"_blank\" rel=\"noreferrer noopener\">AWS troubleshooting guide<\/a>.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Hybrid Cloud<\/h1>\n\n\n\n<p>Now that the overall networking has been set up, we will share what is achievable in exploiting these technologies:<\/p>\n\n\n\n<ul><li><strong>Predictable latency and throughput:<\/strong> With AWS DX, it is possible to choose the right bandwidth. Moreover, the Transit Virtual Interface (VIF) supports jumbo frames (8500 bytes), improving throughput.<\/li><\/ul>\n\n\n\n<p>So, let&#8217;s assume that you are building an HPC (High-Performance Computing) solution with EC2 instances that will operate on large datasets that must be transferred between the on-prem facility and the AWS Cloud.<\/p>\n\n\n\n<p>To speed up the data transfer, it is possible to leverage jumbo frames to send data because more data is transferred in fewer packets.<\/p>\n\n\n\n<p>Moreover, they are also supported natively by the infrastructure, including the EC2 instances! (only the <a href=\"https:\/\/docs.aws.amazon.com\/AWSEC2\/latest\/UserGuide\/instance-types.html#instance-type-summary-table\">current generation<\/a>, though).<\/p>\n\n\n\n<ul><li><strong>Add encryption layer in DX<\/strong>: What if there is a need for strict security compliances and to provide encryption in the Direct Connect link? It is possible to combine a VPN over Direct Connect.&nbsp;<\/li><\/ul>\n\n\n\n<p>If there&#8217;s the plan to use the VPN Site-to-Site managed by AWS, it will cap the bandwidth because of the limit of 1.25 Gbps for the VPN Tunnel. Instead, it is feasible to set up a dedicated IPSec VPN and take advantage of the Direct Connect 100 Gbps Dedicated Connection using a high-end router. Slow down there because it will be very costly&#8230; Only top tier appliances support such high bandwidth and they\u2019re not so affordable.&nbsp;<\/p>\n\n\n\n<p><strong><br><\/strong>To set up this approach:<\/p>\n\n\n\n<ol><li>A Direct Connect Public Virtual Interface must be created first.<\/li><li>Then, a VPN should be configured as depicted in the image below.<\/li><li>A BGP connection is established between the AWS Direct Connect and the Customer Gateway on the public VIF.&nbsp;<\/li><li>A BGP session or a static router will be established between the AWS Transit Gateway and the router on the IPSec VPN tunnel.<\/li><\/ol>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"995\" height=\"402\" src=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image3-2.png\" alt=\"\" class=\"wp-image-4296\" srcset=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image3-2.png 995w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image3-2-400x162.png 400w, https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/03\/image3-2-768x310.png 768w\" sizes=\"(max-width: 995px) 100vw, 995px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>This infrastructure will simplify management and minimize the cost of IPSec VPN connections to multiple Amazon VPCs exploiting the Transit Gateway and, a private dedicated connection is ensured over an internet-based VPN.<\/p>\n\n\n\n<ul><li><strong>Support for Inter-Region Connectivity: <\/strong>Transit Gateway supports inter-Region peering. This means that Direct Connect Gateways attached (also VPN Site-to-Site) to a Transit Gateway, hosted in a specific AWS Region, can exchange traffic with other regions&#8217; resources. The whole traffic will traverse the <strong>AWS Global Network<\/strong>, and it is not exposed on the public internet. The AWS Global network connects all the various Availability Zones with high-bandwidth, low-latency networking over fully redundant, dedicated metro fiber.<\/li><\/ul>\n\n\n\n<h1 class=\"wp-block-heading\">Considerations<\/h1>\n\n\n\n<p>In this article, we have overviewed how it is possible to add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud and how you can benefit from a fully redundant hybrid networking infrastructure.<\/p>\n\n\n\n<p>We remark that a VPN is not designed to provide the same level of bandwidth available to most Direct Connect connections, as it relies on the public internet, so the performances might be unpredictable and indeterministic. On the other hand, it assures a reliable solution when the budget is limited and or when it is impossible to have a second DX provisioned. It is necessary to have at least two DX in order to obtain a high resiliency level of 99.9%.<\/p>\n\n\n\n<p>Have you ever considered this option for the hybrid cloud? Or to one of the proposed solutions? Let us know what you think about this!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction Today, many solutions require approaches that implement a joint use of public cloud providers and their own on-prem resources. [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":4308,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[470],"tags":[568,493],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.9.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>AWS Direct Connect with AWS Site-To-Site VPN as a failover - Proud2beCloud Blog<\/title>\n<meta name=\"description\" content=\"How to add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AWS Direct Connect with AWS Site-To-Site VPN as a failover\" \/>\n<meta property=\"og:description\" content=\"Add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/\" \/>\n<meta property=\"og:site_name\" content=\"Proud2beCloud Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-01T11:58:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-04-01T12:46:53+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Copertina-blog-01-04-22_01-04-22-social-eng-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Gabriele Zaccagno\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"AWS Direct Connect with AWS Site-To-Site VPN as a failover\" \/>\n<meta name=\"twitter:description\" content=\"Add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Copertina-blog-01-04-22_01-04-22-social-eng-1.png\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Gabriele Zaccagno\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/\",\"url\":\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/\",\"name\":\"AWS Direct Connect with AWS Site-To-Site VPN as a failover - Proud2beCloud Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.besharp.it\/#website\"},\"datePublished\":\"2022-04-01T11:58:00+00:00\",\"dateModified\":\"2022-04-01T12:46:53+00:00\",\"author\":{\"@id\":\"https:\/\/blog.besharp.it\/#\/schema\/person\/31e0e38f5d3ebcd29cf76359c1b7d0ea\"},\"description\":\"How to add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.besharp.it\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AWS Direct Connect with AWS Site-To-Site VPN as a failover\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.besharp.it\/#website\",\"url\":\"https:\/\/blog.besharp.it\/\",\"name\":\"Proud2beCloud Blog\",\"description\":\"il blog di beSharp\",\"alternateName\":\"Proud2beCloud Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.besharp.it\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.besharp.it\/#\/schema\/person\/31e0e38f5d3ebcd29cf76359c1b7d0ea\",\"name\":\"Gabriele Zaccagno\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.besharp.it\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/2ea57b1dcb18137216fa115e44fb835b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/2ea57b1dcb18137216fa115e44fb835b?s=96&d=mm&r=g\",\"caption\":\"Gabriele Zaccagno\"},\"description\":\"Technical Chatterbox @ beSharp. I deal with Cloud Migrations and Data Analytics. I spend most of my time in front of a computer while listening to the whole Radiohead discography (B-Sides included).\",\"url\":\"https:\/\/blog.besharp.it\/author\/gabriele-zaccagno\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AWS Direct Connect with AWS Site-To-Site VPN as a failover - Proud2beCloud Blog","description":"How to add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/","og_locale":"en_US","og_type":"article","og_title":"AWS Direct Connect with AWS Site-To-Site VPN as a failover","og_description":"Add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud","og_url":"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/","og_site_name":"Proud2beCloud Blog","article_published_time":"2022-04-01T11:58:00+00:00","article_modified_time":"2022-04-01T12:46:53+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Copertina-blog-01-04-22_01-04-22-social-eng-1.png","type":"image\/png"}],"author":"Gabriele Zaccagno","twitter_card":"summary_large_image","twitter_title":"AWS Direct Connect with AWS Site-To-Site VPN as a failover","twitter_description":"Add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud","twitter_image":"https:\/\/blog.besharp.it\/wp-content\/uploads\/2022\/04\/Copertina-blog-01-04-22_01-04-22-social-eng-1.png","twitter_misc":{"Written by":"Gabriele Zaccagno","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/","url":"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/","name":"AWS Direct Connect with AWS Site-To-Site VPN as a failover - Proud2beCloud Blog","isPartOf":{"@id":"https:\/\/blog.besharp.it\/#website"},"datePublished":"2022-04-01T11:58:00+00:00","dateModified":"2022-04-01T12:46:53+00:00","author":{"@id":"https:\/\/blog.besharp.it\/#\/schema\/person\/31e0e38f5d3ebcd29cf76359c1b7d0ea"},"description":"How to add a VPN site-to-site as a fallback method for a Direct Connect connection that links on-premise facilities to the AWS Cloud","breadcrumb":{"@id":"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.besharp.it\/hybrid-cloud-networking-backup-aws-direct-connect-network-connection-with-aws-site-to-site-vpn\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.besharp.it\/"},{"@type":"ListItem","position":2,"name":"AWS Direct Connect with AWS Site-To-Site VPN as a failover"}]},{"@type":"WebSite","@id":"https:\/\/blog.besharp.it\/#website","url":"https:\/\/blog.besharp.it\/","name":"Proud2beCloud Blog","description":"il blog di beSharp","alternateName":"Proud2beCloud Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.besharp.it\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.besharp.it\/#\/schema\/person\/31e0e38f5d3ebcd29cf76359c1b7d0ea","name":"Gabriele Zaccagno","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.besharp.it\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/2ea57b1dcb18137216fa115e44fb835b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2ea57b1dcb18137216fa115e44fb835b?s=96&d=mm&r=g","caption":"Gabriele Zaccagno"},"description":"Technical Chatterbox @ beSharp. I deal with Cloud Migrations and Data Analytics. I spend most of my time in front of a computer while listening to the whole Radiohead discography (B-Sides included).","url":"https:\/\/blog.besharp.it\/author\/gabriele-zaccagno\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/posts\/4291"}],"collection":[{"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/comments?post=4291"}],"version-history":[{"count":0,"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/posts\/4291\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/media\/4308"}],"wp:attachment":[{"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/media?parent=4291"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/categories?post=4291"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.besharp.it\/wp-json\/wp\/v2\/tags?post=4291"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}