AWS Direct Connect | Direct Connect Gateway Flashcards
Can I establish a Layer 2 connection between VPC and my network?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
No, Layer 2 connections are not supported.
What is Direct Connect Gateway?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Direct Connect Gateway is a grouping of Virtual Private Gateways (VGWs) and Private Virtual Interfaces (VIFs) that belongs to the same AWS account.
Why is Direct Connect Gateway needed?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
It provides two main functions. First; Direct Connect Gateway will enable you to interface with VPCs in any AWS Region (except AWS China Region), enabling you to use your AWS Direct Connect connections to interface with more than one AWS Regions.
Second; you can share private virtual interface to interface with more than one Virtual Private Clouds (VPCs), enabling you to reduce the number of Border Gateway Protocol sessions between your on premise network and AWS deployments.
Are there additional fees when using Direct Connect Gateway and working with remote regions?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
You will pay applicable egress data charges and port hour charges as per AWS Direct Connect Pricing.
Do the private Virtual Interfaces(s), Direct Connect Gateway, and VGWs need to be in the same account to use Direct Connect Gateway functionality?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Yes, private virtual interface, direct connect gateway, and VGW (associated with VPC) must be in the same AWS account to use Direct Connect Gateway functionality.
Can I continue to use all my VPC features if I associate VGW (associated with VPC) to Direct Connect Gateway?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Yes, Networking features such as Elastic File System, Elastic Load Balancer, Application Load Balancer, Security Groups, Access Control List, will still work with Direct Connect Gateway.
Direct Connect Gateway will not support CloudHub functionality, but if you are using AWS Classic VPN or AWS VPN connection to VGW that is assocaited with your Direct Connect Gateway, you will be able to use your VPN connection to failover.
Features that are currently not supported by Direct Connect, AWS Classic VPN, or AWS VPN, such as edge-to-edge routing, VPC peering, VPC endpoint, will not be supported by Direct Connect Gateway.
I am working with one of the AWS Direct Connect partners to get private virtual interface provisioned for my account, can I use Direct Connect Gateway?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Yes, you can associate provisioned Private Virtual Interface with your Direct Connect Gateway when you confirm your provisioned Private Virtual Interface in your AWS account.
What if I just want to connect to VPCs in my local region?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
You can continue to use the current practice of attaching your VIF to VGW; you will continue to have intra-region VPC connectivity, and will be charged egress rate that is applicable based on geographical regions.
What are the limits associated with Direct Connect Gateway usage?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Please refer to AWS Direct Connect Limits to get limits associated with the Direct Connect Gateway feature.
Can a VGW (associated with a VPC) be part of more than one Direct Connect Gateway?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
No, a VGW- VPC pair can not be part of more than one Direct Connect Gateway.
Can a Private Virtual Interface be attached to more than one Direct Connect Gateway?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
No, one Private Virtual Interface can only attach to a single Direct Connect Gateway OR a single VGW.
Can I assocate multiple VGWs (each assocaited with a VPC) to a Direct Connect Gateway?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Yes, this will be allowed as long as the IP CIDR blocks of the VPC associated with the VGW do not overlap.
How do I connect to the remote VPC?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Once the Private VIF has been associated with your Direct Connect Gateway, you can configure BGP as you would with a traditional Private Virtual Interface. For each VGW that is then associated with the Direct Connect Gateway, you will recieve a BGP announcement for the additional CIDR ranges.
Does Direct Connect Gateway break existing CloudHub functionality for customers?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
No, Direct Connect Gateway does not break existing CloudHub for customers. Direct Connect Gateway enables connectivity between on-premise networks and ANY AWS region’s VPC. CloudHub enables connectivity between on-premise network using Direct Connect or VPN within the same region the VIF is associated with the VGW directly. Existing CloudHub functionality will continue to be supported.
What type of traffic is supported, and not supported by Direct Connect Gateway?
Direct Connect Gateway
AWS Direct Connect | Networking & Content Delivery
Please refer to AWS Direct Connect User Guide to review supported and not supported traffic patterns.