General

Open forum for cloud adoption, architecture and design, automation, migrations, managing cloud complexities and cost, and industry trends

  • 177 Topics
  • 278 Replies

177 Topics

R
Rohith_Ramaswamy_ArmugamCadet
Asked in General

Does Aviatrix have a solution that solves Azure's limitation of BYOIP?

As we know Azure doesn't have an AWS BYOIP equivalent? Does Aviatrix have a  mechanism to solve this limitation that would allow a customer to bring their own public IP address into Azure by deploying Aviatrix within Azure?

0
R
3 years ago
J
John_GonsalvesAviatrix Employee
posted in General

Cloud Networking – Having the Right Cloud Network Architecture is Fundamental

Many organisations still believe in everything that the big cloud vendors like AWS, Google, Azure etc are saying. Naturally they each want to sell you their own products and services as being world class, secure and always available. We already know this not to be true with the recent outages … https://techhq.com/2020/12/3-biggest-public-cloud-outages-of-2020/. The reality is they don’t want your organisation to be multi cloud and have public cloud choice. Typically, they want to lock you in and once done, you’ll have little or no say on how to control or secure your data and have poor visibility into events and how that impacts you and your customers until it’s too late. Don’t be fooled into believing them any longer. The next  phase of cloud computing is evolving and organisations are waking up to the fact that they do actually need to be multi cloud ready and have choice. Its predicted that in 2021 more than 50% of data will span multi clouds. This is great news f

0
J
3 years ago
E
EstintCadet
Asked in General

Aviatrix Insane Mode Multicloud

Hello All,   Is Aviatrix Insane Mode work on between spoke gateway in different cloud ? (AWS - GCP) https://docs.aviatrix.com/HowTos/insane_mode.html   Thank you.

1
Mark_Noorman
3 years ago
G
Gnanaprakash_MayilsamyCadet
Asked in General

Overlap-CIDR Between Two VPCs

 For DR purpose and features like  - Fail over  - Fail back - DR Testing  we need to clone source VPC (10.0.0.0/16- us-west1) to another VPC (10.0.0.0/16- us-east2) with same CIDR. Is this OVERLAP-CIDR support is available.  TGW etc.. not support CIDR overlaps

1
Shahzad Ali
3 years ago
K
Kunal_ShahCadet
Asked in General

2 AWS Accounts - Same CGW?

Hello Team, Just curious to know that I am confused with 2 AWS accounts having 2 VPN Connections pointing towards same CGW. It's possible but needs an explanation for the same as I was not knowing it before. Is CGW end using VRF ? for same public IP? Regards, Kunal Shah.

1
Mark_Noorman
3 years ago
R
Ravi_Shankar_YadavCadet
Asked in General

AMI Subscription

" Some controls have been disabled because you are missing the correct permission(s). The missing permission(s) are: aws-marketplace:ViewSubscriptions, aws-marketplace:Subscribe. " Could anyone help to solve this issue?

7
Shahzad Ali
3 years ago
A
Alizah_NaumanCadet
posted in General

Azure FAQs

How does Aviatrix fix problems in Azure?  We orchestrate and manage the UDR routes using Aviatrix Gateway in Azure to provide a scalable architecture and a lot of other things as well.   How does Aviatrix work with ARM templates for Azure?  Aviatrix has its own Terraform provider so configurations can be applied consistently across clouds.  Is Azure NSG similar to NACLs or SG in AWS?  Azure NSG can be attached to either subnet or instance, so it’s similar to both AWS NACL and SG.  Is Azure's NVA similar to the Transit Gateway in AWS?  No, the AWS Transit Gateway is an actual managed service from AWS. Azure NVA is not a managed service in itself. NVA means Network Virtual Appliance and can be either a 3rd-party element or a native Azure element such as Azure Firewall.  Is there NACL in Azure?  What you do with NACL in AWS, you can do with NSG in Azure.   What is the preferred transit opti

0
A
3 years ago
N
Nabeeha_AliCadet
published in General

AWS FAQs

Is Direct Connect (DX) encrypted by default? No. DX is not encrypted. The encryption solution needs to be built on top of it. If you are looking for near line rate encryption for DX and/or ER (Express Route), Aviatrix has a hardware appliance called CloudN that one should consider. Does the 3rd party firewall and Aviatrix controller have to be in AWS, or do the firewall services work on Azure as well? Nothing has to be in AWS.  If you are a customer who has no footprint in AWS, you can only be in Azure, which means that your Controller, GWs, FWs will all be in Azure, too. I want to have routing from multiple regions to my on-prem via AWS-TGW, would I need multiple route peering? Yes, you would terminate a VPN per TGW to on-prem. If using a Direct Connect, you could leverage the DX Gateway.  If the VPN tunnel is built with an AWS-TGW, do we also need to programs routes in VPCs? You will need to go into the VPC route tables and manually configure routes for D

133
Mark_Noorman
3 years ago
A
Alizah_NaumanCadet
published in General

Aviatrix Features FAQs

What's the difference between the Aviatrix Controller and Gateway? Are these 2 separate appliances?  The AVX-Controller sits in the Management/Operations plane. It is the Appliance you deploy from AWS/Azure/etc. You only need one controller. This controller then deploys AVX-Gateway appliances based on use-case and requirement.  We can always automate the Route Table configurations via Cloud Formation, so what does Aviatrix do?  Sure, you can automate the RT configuration, but compared to what the Aviatrix controller does for you, there is a huge difference. The controller injects intelligence into the cloud network. The controller will monitor routes from on-prem, routes from VPC, routes from TGW attachments, routes from peering relationships, and more, and programs those end-to-end not only in a single cloud, but across clouds AND across accounts and subscriptions. The controller audits these routes and paths, ensures that there are no black holes, ensures that th

390
A
3 years ago
A
Alizah_NaumanCadet
posted in General

User VPN FAQs

Do you provide a VPN client for end users for the point-to-site connectivity or are they still using another third party?  Aviatrix has its own VPN client with added benefits like SAML, but you can also use OpenVPN clients as well.  Is there a NAC module for Aviatrix VPN clients?  We can enforce the minimum version of the VPN client that the user uses. But besides that, there are no other NAC functionalities today.  Is transit traffic not possible with the Smart SAML VPN?  Once the user is on the Aviatrix backbone, they can access all the resources. 

0
A
3 years ago
N
Nabeeha_AliCadet
published in General

An Introduction to the Public Cloud FAQs

How do you decide which type of workload should be run on private and public clouds? You can run any type of workload in the public cloud. At the end of day, the VM/Instances in Cloud are regular Linux or Windows machines. The Cloud actually gives you even more options/services to run your workload. Does Aviatrix use Terraform to deploy/automate across the Cloud platforms? Yes! Totally! For Terraform, we are an official provider. Also we support REST API. https://www.terraform.io/docs/providers/aviatrix/. What is the benefit of using different Public Clouds, why not consolidate on one preferred cloud? You want to diversify. Just like how you would do main DC and DR in separate locations, it makes sense to be in different CSPs. Sometimes, there are better offerings in terms of services and support and cost when it comes to different CSPs. Are the controllers and the gateways multi-tenant?  Yes. The Controller allows you to onboard different accounts from different tena

80
N
3 years ago
N
Nabeeha_AliCadet
posted in General

Multicloud Network Architecture (MCNA) FAQs

What is an overlay network? An Overlay is a tunnel providing connectivity over the physical infrastructure. IPsec is an example of this. Does the MCNA apply to k8s workloads as well? All the examples presented were based on VMs workloads but it applies to k8s workloads as well.  They would reside in a VPC at the end of the day, so we can handle it. Is the MCNA an open framework? If so, who is contributing to it? The MCNA is an architecture that Aviatrix developed and implements using our platform. Others may leverage this type of architecture in the future as it is cloud-agnostic. We believe this is the best reference architecture for the cloud for single cloud or multi-cloud deployments. If we are using the same subnet in a different VPC, how does MCNA address that? Aviatrix provides the ability to overcome overlapping CIDRs if you’re using them repeatedly. If you are referring to IP address overlap, we have some solutions for that. The gateways

0
N
3 years ago
N
Nabeeha_AliCadet
posted in General

Site to Cloud FAQs

Is Site to Cloud similar to Site to Site VPN in Azure? Site to Cloud supports any remote sites with visibility.  How does Aviatrix compare with other networking solutions that are available natively in public clouds? Aviatrix is Cloud Native, designed and built in the cloud, other vendors have brought their legacy products to run on the cloud.  Do Aviatrix products provide SaaS or PaaS or both? Our solution runs on your IaaS, it is not a SaaS product… you are in control.

0
N
3 years ago
N
Nabeeha_AliCadet
posted in General

CloudWAN FAQs

How is SD-WAN and SDA accommodated in Aviatrix? Aviatrix integrates nicely with pretty much any SD-WAN provider. You can take a look here for a very common deployment model. https://docs.aviatrix.com/HowTos/transitvpc_designs.html?highlight=SD-WAN#sd-wan-integration How does CloudWAN take the optimal route? We leverage AWS Global Accelerator in AWS and Azure Anycast routing to connect the branch to cloud. With this, the branch will connect to the closest point of entry into that cloud provider's backbone.  Any plans to extend CloudWAN functionality to other SD-WAN solutions (VeloCloud, Versa, Meraki, etc.)? We have customers integrated and are currently using SD-WAN and Aviatrix together.  We are working with teams in WWT with a joint solution launch of Aviatrix + SD-WAN Better Together story.   Does Aviatrix have Enterprise customers leveraging CloudWAN today? Were there any specific challenges with the deployment you could speak to?  Y

0
N
3 years ago
A
azuleonyxCadet
Asked in General

Cannot Onboard an AWS Account

So after I finally got the CloudFormation working, now I am trying to onboard my AWS account, however, I have the following problem as shown in this (compiled) screenshot: It doesn't matter how setup the two roles + policies. I get the same error. If anyone has a working configuration and can post the JSON, maybe that would help.  

17
Shahzad Ali
3 years ago
A
azuleonyxCadet
Asked in General

Deployment of Controller in AWS [LAB] Fails

I have spent probably 5 hours on trying to get a controller deployed into AWS. Using the information here:https://docs.aviatrix.com/StartUpGuides/aviatrix-cloud-controller-startup-guide.html After the first time I attempted it, I am to log into the controller and reset the password. I, then, failed to add my AWS account using the wizard from the first screen.  The error message tells me the role "aviatrix-role-ec2" is not assigned and go to the link above and re-run the cloudformation.  I have attempted to run this. However, when I am setting up template to deploy the system through Cloud formation is failed because the role "aviatrix-role-ec2" exists. However, if I go to IAM, it is NOT there, but for some reason, on the Cloudformation Stack Step 2: IAM role creation, it is listed. Yes, I've tried to use and it still failed. So I think I have the following two options: 1) figure out how to remove the 'ghosting' IAM role 2) figure out how to manually co

11
D
3 years ago
D
dharkuma482Cadet
Asked in General

Why does the max speed with Aviatrix Transit Gateway show 70Gbps?

can you please let me know the calculation.

1
Shahzad Ali
3 years ago
A
Abhishek_KunalCadet
Asked in General

Aviatrix support for VMware on AWS

Hi Team,   In coming days is there any plan for the support for VMware ON AWS, though it is VMware is platform but backend NSX-T run the show.

4
A
3 years ago
C
Charles_WiseCadet
Asked in General

Question about wildcards

What are the limits of wildcards in the egress filtering tool? Can it be used in the middle of a URL or just at the end? For example, is this legal and does it work like you would expect? ecr.*.amazonaws.com or is that just the equivalent of: *.amazonaws.com Also, are these two identical or different? *.ecr.amazonaws.com ecr.amazonaws.com Thanks, Charles Wise

1
T
3 years ago
Shahzad Ali
Shahzad AliAviatrix Employee
posted in General

Terraform Limitations and Choke Points?

How are you and your teams approaching Terraform in general. Terraform is great in certain use-cases but I want to hear what are the limitations and choke points in using Terraform? What are the things it cannot really do?

4
Shahzad Ali
4 years ago
D
Dana_YanchAviatrix Employee
posted in General

Aviatrix and VeloCloud SD-WAN Integration Step by Step

0
D
4 years ago
N
Nauman_MustafaAviatrix Employee
posted in General

Aviatrix Transit GW vs AWS Native TGW

looking for some details on pros/cons of leveraging native AWS TGW vs using Aviatrix transit gateway ?

3
T
4 years ago
Shahzad Ali
Shahzad AliAviatrix Employee
posted in General

Can I Use Azure VPN GW in Hub or Transit VNET?

Azure VPN GW cannot be used as a transit gateway. You should be using NVA (for example Aviatrix Trnsit GW) in Transit VNET

0
Shahzad Ali
4 years ago
Shahzad Ali
Shahzad AliAviatrix Employee
posted in General

Aviatrix Service Gateway with Multiple Features

I am building a lab environment and deploying Aviatrix Service Gateways. Is there a matrix that can tell me what features I can enable on the same GW?For example can I enable Aviatrix Transit and FireNet on the same Gateway?What are the features I cannot turn on the same GW?

0
Shahzad Ali
4 years ago
D
David_MCadet
Asked in General

Failed Upgrade

Wondering how to recover from a failed upgrade on my controller? I tried to install the upgrade again but it failed. 

3
D
4 years ago

Recently Awarded Badges

  • Aviatrix Certified Engineer
    tecnomancerhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    sahil2652has earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    bbeerhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    medhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    bariatzhas earned the badge Aviatrix Certified Engineer
Show all badges
Terms & Conditions