With an AWS-managed VPN site-to-site connection, a private connection is established between the on-premises site and AWS Virtual Private Cloud (VPC). This connection is established across the internet using two AWS components:
- A virtual private network gateway (VPN gateway)
- A customer gateway
As you can see in the following diagram, the VPN gateway is located on the AWS side of your architecture, and the customer gateway is associated with the remote customer location (on-premises):
As this is a managed service, the VPN gateway component, which resides within AWS, is implemented and designed with redundancy in mind and actually consists of two endpoints, which are located in different data centers for resiliency (note: this is not depicted in the preceding logical diagram).
In addition to this, the VPN connection itself consists of two IPsec tunnels. But what is an IPsec tunnel?
IPsec, or Internet Protocol Security, is a secure network protocol suite allowing...
