Tag: azure

multi-cloud networkingLeave a comment

Tech Note: Migrating an Aviatrix Controller from AWS to Azure

rtrentin

Constraints AWS Controller Change the AWS account from IAM role-based to Access and Secret keys This procedure is only supported on Accounts without Gateways deployed. Backup Shutdown Controller Azure Controller Requirements Aviatrix Cloud Network Controller deploys Controller 7.1.4105 and later. To deploy Controller version 7.1.4101 or earlier, subscribe to Aviatrix Secure Networking Platform BYOL. Deploy New Controller The steps below should be completed before the cut over. Bring the controller to the desired software version (7.1.3176) Onboard Access Accounts Transfer Backup from AWS Bucket to Azure Storage Account Restore Use the Controller Settings -> Maintenance -> Backup and Restore to … Continue reading Tech Note: Migrating an Aviatrix Controller from AWS to Azure

multi-cloud networkingLeave a comment

5 min RTO with Aviatrix and Terraform

rtrentin

Disaster recovery involves a set of policies, tools, and procedures to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster. The Recovery Time Objective (RTO) is the targeted duration of time and a service level within which a business process must be restored after a disaster (or disruption) in order to avoid unacceptable consequences associated with a break in business continuity. I covered using Aviatrix to address the challenges of DR/BC before: In this new blog I address a new set of requirements: Proposed Design The proposed solution has the following major … Continue reading 5 min RTO with Aviatrix and Terraform

multi-cloud networking1 Comment

Using Azure Log Analytics with Aviatrix

rtrentin

Special thanks to Jorge, Manny, and Alex! What is Log Analytics Log Analytics is a SaaS offering from Microsoft that helps you collect and report against data generated by resources in Azure or from your on-premises environment. It is a very powerful tool can hold and analyze millions of records using the Kusto query language. Workspace Log Analytics is a tool in the Azure portal that’s used to edit and run log queries with data in Azure Monitor Logs. A Log Analytics workspace is a unique environment for log data from Azure Monitor and other Azure services, such as Microsoft … Continue reading Using Azure Log Analytics with Aviatrix

cloud networking, multi-cloud networkingLeave a comment

Cisco ASAv and Aviatrix Firenet Integration

rtrentin

In this blog I’m revisiting an old friend, ok… colleague, checking how ASAv and FTDv customers can leverage them with Aviatrix. From Cisco website “Secure Firewall ASA Virtual is a firewall with powerful VPN capabilities. It supports site-to-site VPN, remote-access VPN, and clientless VPN functionalities.” More info at: https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/adapt-security-virtual-appliance-ds.html ASAv has 4 interfaces: Management: management interface can also be used for data with the configuration option no management-only GigabitEthernet 0/0 GigabitEthernet 0/1 GigabitEthernet 0/2 One of possible design for ASAv is show on the diagram below where the management interface is dedicated. The FireNet design below is for the case … Continue reading Cisco ASAv and Aviatrix Firenet Integration

multi-cloud networkingLeave a comment

Revamping your Brownfield with Aviatrix

rtrentin

What happens if an enterprise already has a cloud presence as most of our customers and wants to adopt Aviatrix to boost their network and security capabilities? Brownfield Topology hub and spoke topology hub is connected to on-prem spokes are vnet “peered” to the hub spoke has UDR pointing traffic towards a NVA running in the hub Brownfield Environment Spoke subnets have route tables with a single route pointing towards the NVA running in the hub (the /32 route is for my own access to the VM): During this lab I’m continuously pinging a remote VM (192.168.10.10) from a VM … Continue reading Revamping your Brownfield with Aviatrix

multi-cloud networkingLeave a comment

From 0 to 100 mph with Aviatrix and Terraform

rtrentin

Credit to Zack (https://www.linkedin.com/in/zack-schaefer/) on creating a high-available and disaster ready architecture on Azure using Aviatrix. Thanks also to Mr Smoker (https://www.linkedin.com/in/johnsmoker/) and Dennis (https://www.linkedin.com/in/dennishagens/) for helping directly and indirectly :). The gist shared below creates the following topology: The VMs are running NGINX on port 80 and the traffic manager favors East. Transit and Firenet Peering Spokes VMs East: Central: Load Balancers Standalone Gateways SNAT DNAT Traffic Manager Provider Variables Continue reading From 0 to 100 mph with Aviatrix and Terraform

multi-cloud networking1 Comment

Providing Scalability and Availability for Site-2-Cloud VPN with Overlapping IP addresses

rtrentin

Aviatrix supports policy-based and route-based VPNs and those can be configured on standalone, spoke, and transit gateways. The workflow for configuration can be found at https://docs.aviatrix.com/HowTos/site2cloud.html. The focus of this blog are designs where the VPN is deployed on its own spoke or using spoke gateways or a combination of standalone and spoke gateways as described later on. Those configurations are done using the SITE2CLOUD menu: One-to-one mapping is supported: the Remote and Local Subnet fields can contain multiple values comma separated. The maximum number of CIDRs for Site2Cloud network maps is 32. If the Local Subnet field is outside … Continue reading Providing Scalability and Availability for Site-2-Cloud VPN with Overlapping IP addresses

multi-cloud networkingLeave a comment

FortiNet SD-WAN Integration with Aviatrix

rtrentin

BGP to LAN allows an Aviatrix multi-cloud network to communicate with network virtualization appliances (NVAs) without running tunneling protocols. One case is to interoperate with third-party SD-WAN appliances. https://community.aviatrix.com/t/h7htvvc/need-of-conventional-bgp-support-in-the-cloud Constraints LAN interfaces for Aviatrix Transit Primary and third-party cloud instance must be in the different VNets One BGP over LAN connection per gateway is supported. Aviatrix software version 6.8 will not require a dedicated vnet for sd-wan appliances Configuration Once the vnet is created, using the Native Peering, I’ll peer the new vnet with the transit vnet for control and data plane reachability: When the peering is established we can … Continue reading FortiNet SD-WAN Integration with Aviatrix

multi-cloud networking4 Comments

Deploying an Aviatrix FireNet on Azure with Fortinet FortiGate

rtrentin

Aviatrix Transit FireNet allows the deployment of 3rd party firewalls onto the Aviatrix transit architecture. Transit FireNet works the same way as the Firewall Network where traffic in and out of the specified Spoke is forwarded to the firewall instances for inspection or policy application. FireNet Design The diagram below shows the Aviatrix Firenet design for Azure. When a transit gateway is deployed with the firenet option checked, the Aviatrix controller will: create subnets create UDRs create an internal NLB configure the internal NLB (front end, back-end, healtch check) Aviatrix deploys and configures the Internal Load Balancers for a Firenet. … Continue reading Deploying an Aviatrix FireNet on Azure with Fortinet FortiGate