Tag: multicloud

multi-cloud networkingLeave a comment

5 min RTO with Aviatrix and Terraform

rtrentin

Disaster recovery involves a set of policies, tools, and procedures to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster. The Recovery Time Objective (RTO) is the targeted duration of time and a service level within which a business process must be restored after a disaster (or disruption) in order to avoid unacceptable consequences associated with a break in business continuity. I covered using Aviatrix to address the challenges of DR/BC before: In this new blog I address a new set of requirements: Proposed Design The proposed solution has the following major … Continue reading 5 min RTO with Aviatrix and Terraform

cloud networking, multi-cloud networkingLeave a comment

Cisco ASAv and Aviatrix Firenet Integration

rtrentin

In this blog I’m revisiting an old friend, ok… colleague, checking how ASAv and FTDv customers can leverage them with Aviatrix. From Cisco website “Secure Firewall ASA Virtual is a firewall with powerful VPN capabilities. It supports site-to-site VPN, remote-access VPN, and clientless VPN functionalities.” More info at: https://www.cisco.com/c/en/us/products/collateral/security/adaptive-security-virtual-appliance-asav/adapt-security-virtual-appliance-ds.html ASAv has 4 interfaces: Management: management interface can also be used for data with the configuration option no management-only GigabitEthernet 0/0 GigabitEthernet 0/1 GigabitEthernet 0/2 One of possible design for ASAv is show on the diagram below where the management interface is dedicated. The FireNet design below is for the case … Continue reading Cisco ASAv and Aviatrix Firenet Integration

multi-cloud networkingLeave a comment

Revamping your Brownfield with Aviatrix

rtrentin

What happens if an enterprise already has a cloud presence as most of our customers and wants to adopt Aviatrix to boost their network and security capabilities? Brownfield Topology hub and spoke topology hub is connected to on-prem spokes are vnet “peered” to the hub spoke has UDR pointing traffic towards a NVA running in the hub Brownfield Environment Spoke subnets have route tables with a single route pointing towards the NVA running in the hub (the /32 route is for my own access to the VM): During this lab I’m continuously pinging a remote VM (192.168.10.10) from a VM … Continue reading Revamping your Brownfield with Aviatrix

multi-cloud networking1 Comment

Deploying an Aviatrix Firenet on Azure with CheckPoint CloudGuard (Single GWs)

rtrentin

Aviatrix Transit FireNet allows the deployment of 3rd party firewalls onto the Aviatrix transit architecture. Transit FireNet works the same way as the Firewall Network where traffic in and out of the specified Spoke is forwarded to the firewall instances for inspection or policy application. The diagram below shows the Aviatrix Firenet design for Azure. When a transit gateway is deployed with the firenet option checked, the Aviatrix controller will: create subnets create UDRs create an internal NLB configure the internal NLB (front end, back-end, healtch check) Aviatrix deploys and configures the Internal Load Balancers for a Firenet. If you … Continue reading Deploying an Aviatrix Firenet on Azure with CheckPoint CloudGuard (Single GWs)

multi-cloud networkingLeave a comment

Aviatrix useg: intra app domain policies

rtrentin

In this document I’m going to experiment with intra app domain policies: intra policy deny intra policy allow custom intra policies Aviatrix useg implementation is extremely flexible to allow any of the configurations above. Aviatrix useg is in Public Preview mode at this time (Aviatrix version 6.7b): Public preview mode feature options, performance, and scalability may be limited compared to the final feature. If you are not familiar with the feature, please visit my previous blog on useg to get started: Test Deployment I have a small environment with two spokes (spoke30 and spoke40) where I deployed two test VMs: … Continue reading Aviatrix useg: intra app domain policies

multi-cloud networkingLeave a comment

Running a GKE on top of an Aviatrix Secure Cloud Network – Part 2

rtrentin

Multi Cluster Systems (MCS) Aviatrix Overview Aviatrix is a cloud network platform that brings multi-cloud networking, security, and operational visibility capabilities that go beyond what any cloud service provider offers. Aviatrix software leverages AWS, Azure, GCP and Oracle Cloud APIs to interact with and directly program native cloud networking constructs, abstracting the unique complexities of each cloud to form one network data plane, and adds advanced networking, security and operational features enterprises require. FireNet Aviatrix Transit FireNet allows the deployment of 3rd party firewalls onto the Aviatrix transit architecture. Transit FireNet works the same way as the Firewall Network where … Continue reading Running a GKE on top of an Aviatrix Secure Cloud Network – Part 2

multi-cloud networkingLeave a comment

Aviatrix Gateway auto scale v1 is here!

rtrentin

Aviatrix is evolving to address the challenge of deploy, secure, and operate a secure multi cloud networking. As it advances to fill the gaps it still requires certain knowledge of the environment like determine the size of the gateways instances: an over provisioned gateway can cost more than necessary but on the other side an under provisioned gateway can impact the performance and availability of applications. CoPilot 1.10 released in May brought the capability to create policies that based on the telemetry allows to scale the managed resources up or down. Later the feature will support to scale the resources … Continue reading Aviatrix Gateway auto scale v1 is here!

multi-cloud networkingLeave a comment

FortiNet SD-WAN Integration with Aviatrix

rtrentin

BGP to LAN allows an Aviatrix multi-cloud network to communicate with network virtualization appliances (NVAs) without running tunneling protocols. One case is to interoperate with third-party SD-WAN appliances. https://community.aviatrix.com/t/h7htvvc/need-of-conventional-bgp-support-in-the-cloud Constraints LAN interfaces for Aviatrix Transit Primary and third-party cloud instance must be in the different VNets One BGP over LAN connection per gateway is supported. Aviatrix software version 6.8 will not require a dedicated vnet for sd-wan appliances Configuration Once the vnet is created, using the Native Peering, I’ll peer the new vnet with the transit vnet for control and data plane reachability: When the peering is established we can … Continue reading FortiNet SD-WAN Integration with Aviatrix