Reply To: Question – multinational investment bank connectivity – DC vs VPN

[tomw]

Thanks for your reply. I work in AWS professionally and have for years, VPN is always the obvious and first choice for a DirectConnect backup unless VPN(s) isn’t suitable for some reason. In the real world I would look at creating a VPN to a Transit Gateway VPN attachment ( https://docs.aws.amazon.com/whitepapers/latest/aws-vpc-connectivity-options/aws-transit-gateway-vpn.html ).

I did see “addressed immediately” in the question but I thought the “MOST cost effective” part of the question (with MOST in capitals) was the key to this question. The answer when copied in full says to establish tunnels to each of the ten VPCs. I interpreted that as 10 VPNs. Is that deliberate in that question? Or should it be tweaked?

Full text of answer “Establish VPN tunnels from your on-premises data center to each of the 10 VPCs. Terminate each VPN tunnel connection at the virtual private gateway (VGW) of the respective VPC. Configure BGP for route management.”