how complicated is a VPN between AWS regions

Skaperen

how complicated is it to set up a VPN between two AWS regions? has anyone here ever done it? is OpenVPN a good choice for this? what type of instance would it need? are there any instructions online specifically for this?

BenHar

Amazon Virtual Private Cloud (Amazon VPC) offers a comprehensive set of virtual networking capabilities that provide AWS customers with many options for designing and implementing networks on the AWS cloud. With Amazon VPC, customers can provision logically isolated virtual networks to host their AWS resources. Customers can create multiple VPCs within the same region or in different regions, in the same account or in different accounts.

Read it on aws.amazon.com search it and there's a guide for this setting.

Skaperen

so VPCs can just be connected together?

doing nothing, VPCs in the same region are "connected" ... traffic from one addressed to another does get there ok, but between regions requires addressing the public IP address and security group setup to allow it through. lots of work each time.

BenHar

Skaperen wroteso VPCs can just be connected together?

doing nothing, VPCs in the same region are "connected" ... traffic from one addressed to another does get there ok, but between regions requires addressing the public IP address and security group setup to allow it through. lots of work each time.

Yes exactly!

Skaperen

that's why i wrote a script to auto-configure it and built it into an AMI. just launch the AMI in 2 regions and the 2 instances find each other and share a key via tags. it even includes address translation in the OpenVPN configuration to deal with VPCs having the same IPs. launch more instances in other regions (one instance per region) and they automatically build tunnels between all regions (91 tunnels for 14 regions).

Nacmac

that's why i wrote a script to auto-configure it and built it into an AMI. just launch the AMI in 2 regions and the 2 instances find each other and share a key via tags. it even includes address translation in the OpenVPN configuration to deal with VPCs having the same IPs. launch more instances in other regions (one instance per region) and they automatically build tunnels between all regions (91 tunnels for 14 regions).

That sounds amazing. Is that code available somewhere (github, etc)?

Skaperen

i am not releasing this source code. the current plan is to market the AMI with a free-trial period.

anxjk

Skaperen wrotei am not releasing this source code. the current plan is to market the AMI with a free-trial period.

Do you have a link?