General

Open forum for cloud adoption, architecture and design, automation, migrations, managing cloud complexities and cost, and industry trends

  • 180 Topics
  • 278 Replies

180 Topics

Bigo
BigoSecond Officer
Asked in General

User VPN for PaaS Services

Hi Community,I have the following design in which I’m trying to connect from my laptop to an SFTP blob storage in Azure via private endpoint.I have 3 VNETs:ACCESS: contains Aviatrix VPN gateway, Aviatrix spoke gateway and DNS inbound endpoint for on-prem DNS resolution TRANSIT: for Aviatrix Transit gateway SFTP-TEST: spoke vnet containing one Aviatrix Spoke Gateway and the private endpoint for the SFTP blob storageNow, from my laptop I can resolve the DNS name correctly: However I cannot connet to the SFTP private endpoint, while the connection to the public one works (closed at the end because I configured to block public access): Do you think I’m missing something in the architecture, or is this scenario not supported with aviatrix? Many thanks

10
Bigo
8 months ago
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
published in General

5 Cloud Networking Must-Read Stories: July 2023News

The weather may be starting to cool, but it will come as no surprise to those with boots on the ground that cloud infrastructure and multicloud are continuing to heat up. Their upward trajectory comes with expectations of further acceleration in 2024 (we see you, AI initiatives). Still, there’s red-hot debate over how security and the skills gap will be handled even as organizations step on the gas.   Here are the reads that will catch you up on the hottest topics in cloud networking:  Security Magazine 85% of Organizations are Adopting Multicloud Strategies Pluralsight released its second annual State of Cloud Report, which found that multicloud strategies are becoming increasingly commonplace, with more than 65% of organizations currently operating within multicloud environments and another 20% saying they’re actively pursuing an additional cloud platform for their cloud environment. According to the findings however, in the rush toward multicloud architectures, many organizations ar

520
Jessica_MacGregor
8 months ago
MohammedBanabila
MohammedBanabilaFirst Officer
posted in General

design diagram topology for Aviatrix

is there  software that design diagram topology for Aviatrix  ?    for example draw.io   or cloudcraft

1
Nico
8 months ago
MohammedBanabila
MohammedBanabilaFirst Officer
posted in General

add aviatrix controller on ec2 instance  manually

can be   add aviatrix controller on ec2 instance  manually  without using aviatric ami in marketplace ?

1
Nico
8 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, August 11, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries: Reddit August 11 How-to install SSM Agent before servers land in VPC August 11 Use Azure Firewall as internet-facing DNS proxy? August 10 A bit overwhelmed and client needs guidance for a proposal, now. Does this make sense? Dev/Prod in Azure August 10 Advice for taking over existing cloud networking August 10 Expert Advice on Cloud Security Challenges Businesses Face August 9 Managing Cloud Security - C838 tips and tricks Stack OverflowAugust 11 Ter

0
Jennifer T
8 months ago
Bigo
BigoSecond Officer
posted in General

Copilot Functions missing from Controller

Hi Community,while experimentig wth Aviatrix I was not able to perform some actions from Copilot, and I had to do them via the controller.Can you help me understanding if I missed them, or if they are not moved yet?Spoke Gateway detachment from transit: under Cloud Fabric > Gateways > Spoke Gateways > MyGwName - Edit I tried to delete the TGW name, but after I clicked away from the field, the TGW appeared again  OpenVPN: all the openVPN menus of the controller are missing in Copilot. Moreover, the “Additional CIDRs” option is only present in the controller under OpenVPN  > Edit Config > Modify Split Tunnel, but it is not reflected under Gateway > MyGwName > Edit Designated Gateway > Additional CIDRs (for Controller) and Cloud Fabric > Speciality Gateways > Spoke Gateways > MyGwName - Edit > Split Tunnel > Additional CIDRsMany thanks, Francesco

5
Nico
8 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Altitude Podcast: The 2 Most Important Cloud Lessons from Season One

By Bryan Woodworth August 7th, 2023As we close in on the first six months of Altitude: The Unsung Heroes of Cloud Transformation, I want to take this opportunity to reflect on what I’ve learned after hosting so many interesting, influential, and inspiring guests. Together, we’ve explored a wide range of topics, such as the evolution of cloud, cloud migration, future trends, zero trust, digital transformation, and much more. Out of all these topics, I’ve selected the “top 2” that I want to explore in more detail.   It was challenging to pick two favorite topics from an entire season, so before I delve into them further, I’d like to highlight a few notable episodes that deserve special attention: “The Impact of the Cloud Networking and Security Skills Gap on Enterprises” with Danielle Coady, VP of Marketing at Aviatrix, and Nauman Mustafa, VP of Business Development at Aviatrix: Danielle and Nauman highlight the importance of closing the skills gap in cloud, and we explore how the Aviatr

0
Jennifer T
9 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, August 8, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditAug 8 Cloud architects: should I specialize in cloud security?  (ACE)Aug 8 GRC SAP or take a chance to go into cloud security?Aug 8 Should I negotiate offer?  Posted a couple of weeks ago about a network security engineer interview… They made me an offer…Should I negotiate? I've got 5+ years of experience, Bachelors and Masters degree in Cybersecurity, Security + cert, CCSA cert (position primarily deals with Checkpoint Firewalls, as well as sev

0
Jennifer T
9 months ago
MohammedBanabila
MohammedBanabilaFirst Officer
posted in General

using aviatrix as layer for storage replication between multicloud

 for  curiosity  purpose   can  be   use  Aviatric  as  layer   for  storage  replication  between  multi cloud ?

5
Nico
9 months ago
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, August 4, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries: RedditAug 4 Good independent SD-WAN options?Aug 4 Blogpost Friday! (Share yours and others’!)Aug 4 Telecom guy trying to switch gears into a networking/IT roleAug 3 IP addressing, DHCP, and multiple sites best practice?Aug 3 Complete Network Rebuild - Advice neededAug 3 Junior Network Engineer Resources (Looking for certifications and advice)Aug 3 Using GPT To prepare for SAP-C02Aug 3 Multicloud cost management dashboard (CostIQ) Aug 2 Certificates (

0
Jessica_MacGregor
9 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, August 1, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditAug 1 Unknown Virtual Networks Someone before our time here at this org created a bunch of Vnets with no tags and the keyword "CDP"Aug 1 What resources would you recommend to learn IT Engineering? Career AdviceAug 1 Fortinet & Azure vWAN NVA - Has anyone any experience? We are in the process of trying to decide between integrating a Fortinet NVA into Azure vWAN against deploying a HA pair of VM's in a separate spokeStack OverflowAug 1 How to

0
Jennifer T
9 months ago
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, July 28, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries: RedditJul 28 Is there a 'boil me like a frog' slow approach to learning basic network automation?Jul 28 Network automation use casesJul 28 Blogpost Friday!Jul 28 A cool guide about comparing cloud computing services between the giants of the industry. (Shout out to all you visual learners!)Jul 27 Why did you choose to use a 3rd party load balancer in the cloud instead of a native load balancer?Jul 27 Too Many Cooks, Too Little Documentation… (Questio

0
Jessica_MacGregor
9 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 25, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 25 Is a private NAT gateway the correct solution (In the process of planning a VPN migration from an on prem datacenter to AWS)July 25 Question regarding landing zone using azure-caf terraform supermoduleJuly 25 How did you get into a cloud engineer or cyber security position?July 25 Any tips/advice for D315? (Network and Security - Foundations)July 25 Recommendations for resources on learning networking for securityStack OverflowJuly 25 Ho

0
Jennifer T
9 months ago
Katie Holms
Katie HolmsAviatrix Employee
posted in General

Any cloud networking and security folks going to AWS Summit NY (July 26)?  

Is anyone attending the AWS Summit in New York this Wednesday, July 26th? Having attended last year, I found that the AWS Summit was a great opportunity to connect with customers, partners, peers, and vendors supplying services within AWS. This provided great insight into the power of AWS and many platforms to help enhance an organizations of utilization of AWS in order to truly meet the business needs of the company. I’m looking forward to learning about how security continues to be enhanced in AWS and to protect the applications running within. In addition, I’m looking forward to understanding how to build out solutions that not only meet the technical objectives but also keep costs and the business in mind this year! I am excited to see you on Wednesday at Booth #235 and hope that if you’re traveling in from out of town you have the opportunity to walk around and explore NYC and all that it has to offer! Will you be in NY this week? What’s your advice for those attending the AWS Sum

0
Katie Holms
9 months ago
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, July 21, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 21 Advice For Those New to Network EngineeringJul 21 Pentesting Azure CloudJul 21 Do you guys have IT degrees or just certifications?Jul 21 Silly VPN questionJul 21 Blogpost Friday! (A regular – great place to share your blog posts, or interesting pieces you’ve read lately!)Jul 21 Cisco Secure Cloud Analytics (Seeking alternatives)Jul 20 Firewall rules - descriptionsJul 19 Small companies’ firewall best practicesJul 19 In need of help to

0
Jessica_MacGregor
9 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 18 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 18 Connect many sites on many clouds. What are my options? (My company is planning to deploy a solution that spans AWS and Azure and on prem sites…) July 18 Terraform Code Migration (His team recently got handed ownership of our terraform code for our azure landing zone.) July 18 vNet Design Question – Subnetting and Load Balancer placement July 17 How granular do you get with your TF files? July 17 Next job: a medium company vs a large one

1
Nick_Davitashvili.1
9 months ago
Bigo
BigoSecond Officer
Asked in General

AWS onboarding as secondary CSP

I have my Aviatrix controller deployed in Azure, and I’d like to start managing AWS resources.I couldn’t find where the documentation for onboarding AWS account is.I could only find docs aboutusing AWS as the first CSP, where the controller lives.Can anyone sahre some tutorial for  onboarding AWS accounts as secondary CSP?

3
Nico
9 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, July 14, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, please share the link to your responses back to this post so others in the community can follow you!Here are today’s queries and have a great weekend!RedditJuly 14 Favorite firewall you worked on?July 14 Any advice on vNet design for large number of networksJuly 14 Unable to create AWS route table (Using Terraform v1.05 and the default AWS provider and trying to create a private and public route table for an EKS cluster but for some reason I’m encountering the following error when running terraform)July 14 Correct firewall and NAT rules for selective routing to speci

2
Nick_Davitashvili.1
9 months ago
Jennifer T
Jennifer TAviatrix Employee
posted in General

Industry Article: Lack of Cloud Expertise Creates Gaps for MSPs to Fill | July 12, 2023

 By Mike Vizard on July 11, 2023A survey of more than 900 technologists and leaders in the United States, Europe, Australia, and India conducted by Pluralsight, a provider of an online platform for learning IT skills, finds that nearly two-thirds of respondents (65 percent) are working for organizations that employ multiple clouds. Still, only 9 percent report having any extensive experience with more than one cloud.In theory, the skills shortage should create a massive gap for managed service providers (MSPs) to fill. However, nearly three-quarters of respondents (74 percent) said they expect to increase investments in developing cloud skills. Artificial intelligence and machine learning are the most in-demand cloud skills (23 percent). The largest cloud skills gaps exist in data, analytics, engineering, and storage (42 percent), followed by security and governance (37 percent).MSPs must demonstrate their cloud expertiseThe challenge that MSPs face is convincing organizations to rely

0
Jennifer T
9 months ago
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 11, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 11 Networks should be fast, redundant, dumb pipes. Host and proxy software should handle security/overlay features. Change my mind.Jul 11 Fortigate VPN IPsec with BGPJul 11 Seeking Study Material and Guidance for GCP Associate Exam PreparationJul 11 Across account access from Lambda to Access Point?Jul 10 Want to get into IT infrastructure...is CCNA my best bet? Jul 10 Education and Certification Survey (A chance to show off your ACE and

3
Nick_Davitashvili.1
9 months ago
Bigo
BigoSecond Officer
Asked in General

Cannot enable CoPilot Security Group Management

Following the CoPilot startup guide, I’m trying to enable the feature “CoPilot Security Group Management” from the Controller, but I got the following error:Add rule for [] failed:How can I enable this feature? Controller version: UserConnect-7.1.1710CoPilot version: v3.13.0 | Appliance v3Both Controller and CoPilot are deployed in the same Azure VNET, in different subnets

4
Bigo
9 months ago
Bigo
BigoSecond Officer
Asked in General

Copilot AirSpace Topology not showing all gateways

I created a basic infrstructure in Azure with terraform, consisting of 2 spoke gateways and 1 transit gateway.VNETs, Gateways and peerings are created correctly.  However, on the AirSpace Topology view, I can see the subnet and the controller object only for VNET1 and not for VNET2 and Transit VNET.What could be wrong? 

2
Bigo
9 months ago
S
skriptdakidCadet
Asked in General

Sandbox Starter Tool Setup

The link in the SBST documentation points to a marketplace subscription that is no longer available to opt-in to. The TF script failed due to this issue also. Will there be a fix for this soon?

11
Shahzad Ali
10 months ago
Bigo
BigoSecond Officer
Asked in General

Resource Creation failed from CoPilot

I tried creating both an Azure VNET an Aviatrix gateway from CoPilot, but they both failed with the following error:[AVXERR-RBAC-0024] User does not have access to account MY_AZURE_SUBSCRIPTION to perform the current action  Note that both actions succeded if performed from the controller.The servce account I’m using for copilot is named SVC_CoPilot_usr, is part of the SVC_CoPilot permission group, which has “all_write” permissions.

2
Bigo
10 months ago
V
vivas
Asked in General

How to limit topology replay to the last 3 months

Our topology replay keeps data from Dec 2022 until today. Actually, we are not interested in keeping data that far; and sincerely, it is a little bit of a nuisance during emergency because if something happens today, you end up spending time zooming in.Any idea how to prune this data? I reduced Topology Replay disk utilization to 2k records and I did not see any difference. Thanks, A 

2
V
10 months ago

Recently Awarded Badges

  • Aviatrix Certified Engineer
    Gergelyhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    rakeshnaidug99has earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    thainvhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    A_Mhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    Aman.ththas earned the badge Aviatrix Certified Engineer
Show all badges
Terms & Conditions