VPN S2S 2

Question 1

Connected Resources

What AWS virtual resources does a VPN connect together?

Answer 1

VGW and CGW

Question 2

Connected Resources

What actual things are provisioned when you create a VGW?

Answer 2

Two ENIs, in separate AZs

Question 3

Connected Resources

What’s connected when you establish a VPN?

Answer 3

Separate, independent tunnels from each ENI of the VGW to the single CGW.

Question 4

Connected Resources

What’s the weakest link in a typical VPN setup?

Answer 4

CGW: likely one router

Question 5

Routing

My CGW doesn’t support BGP, does that matter?

Answer 5

YES, you can only do static VPNs, not dynamic VPNs.

Question 6

Routing

Two types of routing setups for VPNs?

Answer 6

Static routing and dynamic.

Question 7

Routing

What is the simpler routing type for VPNs?

Answer 7

Static: hand-configure CIDR blocks

Question 8

Routing

What’s a cool feature you give up with static VPN routing?

Answer 8

Load balancing and multi-connection failover

Question 9

Routing

How does dynamic VPN work?

Answer 9

BGP protocol: routers exchange CIDR blocks