Tag: cloud networking

multi-cloud networkingLeave a comment

Moving an AWS brownfield to Aviatrix

rtrentin

Brownfield environment is show in the diagram below: (I clicked my way through the deployment, I have to confess :(): ASA: I modified a few items from the configuration generated by AWS, mainly: Testing Once the configuration is applied to the ASAv, we see the Site-to-Site VPN connections, after a few seconds, come up online: A VM running behind the on-prem ASA firewall can ping the VMs running on AWS: Aviatrix Deployment Transit and Firenet can be deployed using the following code: Site-2-Cloud Once the AVX transit is deployed, the next step is to connect it to on-prem: S2C config: … Continue reading Moving an AWS brownfield to Aviatrix

multi-cloud networking1 Comment

“Terraform-ing” your way towards Secure Multi Cloud Networking with Aviatrix

rtrentin

I’m going to Terraform an entire Aviatrix deployment using terraform on this blog, mainly the controller and copilot. There is always discussion around the controller and copilot deployment using automation but I’m assume if you are reading this post you are already convinced. Management Network I’m creating a new management network and subnet. This step is not necessary but it helps validating that the gcp controller terraform module can deploy a controller into an existing vpc: Controller Deployment The module gcp-controller allows you to launch the Aviatrix Controller and create the Aviatrix access account connecting to the Controller in Google … Continue reading “Terraform-ing” your way towards Secure Multi Cloud Networking with Aviatrix

multi-cloud networkingLeave a comment

Establishing Multiple External Connectivity using Aviatrix Site-2-Cloud (S2C)

rtrentin

The premises of this design is to establish a backup path using the internet to protect application flows that still leverage on-prem and or customers seating on a main campus accessing apps living on the cloud: As I don’t have a DX circuit I’m going to use a Site-to-Site VPN to simulate it and Site-2-Cloud from the AVX transit gateways will provide backup to the DX connection. Primary Configuration The primary connection uses DX and there are a few supported scenarios to integrate it with Aviatrix. I’m going to leverage private interfaces and connect it to a VGW on the … Continue reading Establishing Multiple External Connectivity using Aviatrix Site-2-Cloud (S2C)

multi-cloud networkingLeave a comment

Replacing Native NAT Gateways with Aviatrix Spoke Gateways

rtrentin

In this post I’m going to transfer the functionality of a couple of native NAT gateways to Aviatrix while preserving the NAT GWs IP addresses. If you need a refresh on AVX egress capabilities please take a look at: AVX spoke gateways can be used as egress in a distributed model customizing the snat functionality. Elastic IP (EIP) An Elastic IP address is a static IPv4 address which is reachable from the internet. An Elastic IP address is allocated to your AWS account, and is yours until you release it. NAT Gateways A NAT gateway is a Network Address Translation … Continue reading Replacing Native NAT Gateways with Aviatrix Spoke Gateways

multi-cloud networkingLeave a comment

5 min RTO with Aviatrix and Terraform

rtrentin

Disaster recovery involves a set of policies, tools, and procedures to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster. The Recovery Time Objective (RTO) is the targeted duration of time and a service level within which a business process must be restored after a disaster (or disruption) in order to avoid unacceptable consequences associated with a break in business continuity. I covered using Aviatrix to address the challenges of DR/BC before: In this new blog I address a new set of requirements: Proposed Design The proposed solution has the following major … Continue reading 5 min RTO with Aviatrix and Terraform

multi-cloud networking1 Comment

Using Azure Log Analytics with Aviatrix

rtrentin

Special thanks to Jorge, Manny, and Alex! What is Log Analytics Log Analytics is a SaaS offering from Microsoft that helps you collect and report against data generated by resources in Azure or from your on-premises environment. It is a very powerful tool can hold and analyze millions of records using the Kusto query language. Workspace Log Analytics is a tool in the Azure portal that’s used to edit and run log queries with data in Azure Monitor Logs. A Log Analytics workspace is a unique environment for log data from Azure Monitor and other Azure services, such as Microsoft … Continue reading Using Azure Log Analytics with Aviatrix

cloud networking, multi-cloud networkingLeave a comment

Cisco ASAv and Aviatrix Firenet Integration

rtrentin

In this blog I’m revisiting an old friend, ok… colleague, checking how ASAv and FTDv customers can leverage them with Aviatrix. From Cisco website “Secure Firewall ASA Virtual is a firewall with powerful VPN capabilities. It supports site-to-site VPN, remote-access VPN, and clientless VPN functionalities.” More info at: https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/adapt-security-virtual-appliance-ds.html ASAv has 4 interfaces: Management: management interface can also be used for data with the configuration option no management-only GigabitEthernet 0/0 GigabitEthernet 0/1 GigabitEthernet 0/2 One of possible design for ASAv is show on the diagram below where the management interface is dedicated. The FireNet design below is for the case … Continue reading Cisco ASAv and Aviatrix Firenet Integration

multi-cloud networkingLeave a comment

Revamping your Brownfield with Aviatrix

rtrentin

What happens if an enterprise already has a cloud presence as most of our customers and wants to adopt Aviatrix to boost their network and security capabilities? Brownfield Topology hub and spoke topology hub is connected to on-prem spokes are vnet “peered” to the hub spoke has UDR pointing traffic towards a NVA running in the hub Brownfield Environment Spoke subnets have route tables with a single route pointing towards the NVA running in the hub (the /32 route is for my own access to the VM): During this lab I’m continuously pinging a remote VM (192.168.10.10) from a VM … Continue reading Revamping your Brownfield with Aviatrix

multi-cloud networkingLeave a comment

From 0 to 100 mph with Aviatrix and Terraform

rtrentin

Credit to Zack (https://www.linkedin.com/in/zack-schaefer/) on creating a high-available and disaster ready architecture on Azure using Aviatrix. Thanks also to Mr Smoker (https://www.linkedin.com/in/johnsmoker/) and Dennis (https://www.linkedin.com/in/dennishagens/) for helping directly and indirectly :). The gist shared below creates the following topology: The VMs are running NGINX on port 80 and the traffic manager favors East. Transit and Firenet Peering Spokes VMs East: Central: Load Balancers Standalone Gateways SNAT DNAT Traffic Manager Provider Variables Continue reading From 0 to 100 mph with Aviatrix and Terraform

multi-cloud networking1 Comment

Site2Cloud Design for DR/BC using Aviatrix

rtrentin

On my previous blog I went trough the design options for connecting sites to cloud using Aviatrix with the following requirements: overlapping addresses high-availability scalability The blog can be found at: In this post I include a new requirement to the architecture: disaster recovery. Disaster may occur in a cloud provider regions or network. For the continuity of your business-critical applications you need to have a disaster recovery design. When you interconnect the same network using more than one connection, you introduce parallel paths between the networks. Parallel paths could lead to asymmetrical routing. Transit Peering Transit Gateway Peering connects … Continue reading Site2Cloud Design for DR/BC using Aviatrix