{"id":14201,"date":"2023-06-13T12:01:28","date_gmt":"2023-06-13T06:31:28","guid":{"rendered":"https:\/\/opstree.com\/blog\/\/?p=14201"},"modified":"2023-06-13T12:14:33","modified_gmt":"2023-06-13T06:44:33","slug":"aws-site-to-site-vpn-connection","status":"publish","type":"post","link":"https:\/\/opstree.com\/blog\/2023\/06\/13\/aws-site-to-site-vpn-connection\/","title":{"rendered":"AWS Site-to-Site VPN Connection"},"content":{"rendered":"\n

<\/p>\n\n\n\n

When I was working on our client there was a task in which we had to migrate the application from azure cloud to AWS. Migrating the application was a later thing, first, we needed to create a secure connection between the two clouds so that we could migrate securely and encrypted, so for this, we thought of a Site-to-SiteVPN connection.
Through this blog, I will guide you on how we connect azure cloud to AWS cloud by AWS site-to-site VPN connection.<\/p>\n\n\n\n

Why we used a Site-to-Site VPN connection?<\/h2>\n\n\n\n

AWS site-to-site VPN is a service offered by Amazon so that we can securely connect to our cloud. It creates a secure and encrypted connection between our Azure infrastructure and AWS infrastructure. AWS site-to-site VPN supports internet protocol security which gives secure and private communication between our on premises network and VPC.<\/p>\n\n\n\n

Features of Site-to-Site VPN Connection<\/h2>\n\n\n\n

Secure and Encrypted communication:-<\/strong> It establishes a secure and encrypted connection between our clouds. This also ensures that data transmitted between the two networks is protected from unauthorized access.<\/p>\n\n\n\n\n\n\n\n

Hybrid Cloud Connectivity:-<\/strong> Using AWS Site-to-Site VPN enables hybrid cloud architectures by connecting your on-premises data center or office network with your AWS VPC.<\/p>\n\n\n\n

Flexible and Scalable:-<\/strong> AWS Site-to-Site VPN is highly flexible and scalable. We can connect many sites and networks by establishing several VPN connections to various VPC or AWS regions.<\/p>\n\n\n\n

Steps to set up AWS Site-to-Site VPN connection between Azure and AWS<\/h2>\n\n\n\n

Step 1:<\/strong> Create Virtual Network Gateway in your Azure account.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 2:<\/strong> Now go to your AWS account and create customer gateway.<\/p>\n\n\n\n

Here we are using the Public IP of Virtual Network Gateway in IP Address field which we created in step 1.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 3:<\/strong> After creating customer gateway, We need to create virtual private gateway in AWS.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 4:<\/strong> After creating a virtual private gateway, Now we need to attach the virtual private gateway with our VPC. Select the virtual private gateway which you have created.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Go to Action and click on Attach to VPC.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Select your VPC and click on Attach to VPC.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Now your virtual private gateway is attached with VPC.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 5:<\/strong> Create Site-to-Site VPN connection in AWS.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Here in Static IP prefixes, we are using the Subnet CIDR of Azure account in Static IP prefixes field.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 6:<\/strong> After creating Site-to-Site VPN connection we need to download configuration file. Click on Download configuration.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Select Vendor and Platform at Generic and click on Download.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 7:<\/strong> Now go to your Azure account and create Local Network Gateway.<\/p>\n\n\n\n

Here we are using Virtual Private Gateway IP in IP Address field from the configuration file you have downloaded in step 6 and AWS VPC id in Address Space(s) field.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 8:<\/strong> Now go to your Virtual Network Gateway you previously created in step 1 and click on add connection.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Here we are using shared key which is available on the configuration file you have downloaded in step 6.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 9:<\/strong> After the connection established , Now go to your AWS account and select VPN connection you have created and see tunnel details. There you will see Tunnel 1 is up.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 10:<\/strong> Now we need to add add virtual private gateway in route table.<\/p>\n\n\n\n

Select you Route Table and click on Routes and then Edit Routes.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Then add the Subnet CIDR of Azure and in Target you have to select Virtual Private Gateway.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Step 11:<\/strong> Now your connection is established between AWS to Azure. Now you can create Instances in both Account and test their connection.<\/p>\n\n\n\n

Conclusion<\/h2>\n\n\n\n

In this blog, we have learned that AWS Site-to-Site VPN connection is used to establish secure and encrypted connections between our clouds. We have also discussed why we used AWS Site-to-Site VPN connection and discussed its features. Also, We have Setup AWS Site-to-Site VPN connection between Azure and AWS.<\/p>\n\n\n\n

Blog Pundits:  Shweta Tyagi<\/a><\/strong> and Sandeep Rawat<\/a><\/strong><\/p>\n\n\n\n

OpsTree is an End-to-End DevOps Solution Provider<\/a>.<\/strong><\/p>\n\n\n\n

\n
Contact Us<\/a><\/div>\n<\/div>\n\n\n\n

Connect with Us<\/strong><\/p>\n\n\n\n