Technical Forum

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 25 Is a private NAT gateway the correct solution (In the process of planning a VPN migration from an on prem datacenter to AWS)July 25 Question regarding landing zone using azure-caf terraform supermoduleJuly 25 How did you get into a cloud engineer or cyber security position?July 25 Any tips/advice for D315? (Network and Security - Foundations)July 25 Recommendations for resources on learning networking for securityStack OverflowJuly 25 Ho

Is anyone attending the AWS Summit in New York this Wednesday, July 26th? Having attended last year, I found that the AWS Summit was a great opportunity to connect with customers, partners, peers, and vendors supplying services within AWS. This provided great insight into the power of AWS and many platforms to help enhance an organizations of utilization of AWS in order to truly meet the business needs of the company. I’m looking forward to learning about how security continues to be enhanced in AWS and to protect the applications running within. In addition, I’m looking forward to understanding how to build out solutions that not only meet the technical objectives but also keep costs and the business in mind this year! I am excited to see you on Wednesday at Booth #235 and hope that if you’re traveling in from out of town you have the opportunity to walk around and explore NYC and all that it has to offer! Will you be in NY this week? What’s your advice for those attending the AWS Sum

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 21 Advice For Those New to Network EngineeringJul 21 Pentesting Azure CloudJul 21 Do you guys have IT degrees or just certifications?Jul 21 Silly VPN questionJul 21 Blogpost Friday! (A regular – great place to share your blog posts, or interesting pieces you’ve read lately!)Jul 21 Cisco Secure Cloud Analytics (Seeking alternatives)Jul 20 Firewall rules - descriptionsJul 19 Small companies’ firewall best practicesJul 19 In need of help to

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 18 Connect many sites on many clouds. What are my options? (My company is planning to deploy a solution that spans AWS and Azure and on prem sites…) July 18 Terraform Code Migration (His team recently got handed ownership of our terraform code for our azure landing zone.) July 18 vNet Design Question – Subnetting and Load Balancer placement July 17 How granular do you get with your TF files? July 17 Next job: a medium company vs a large one

I have my Aviatrix controller deployed in Azure, and I’d like to start managing AWS resources.I couldn’t find where the documentation for onboarding AWS account is.I could only find docs aboutusing AWS as the first CSP, where the controller lives.Can anyone sahre some tutorial for  onboarding AWS accounts as secondary CSP?

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, please share the link to your responses back to this post so others in the community can follow you!Here are today’s queries and have a great weekend!RedditJuly 14 Favorite firewall you worked on?July 14 Any advice on vNet design for large number of networksJuly 14 Unable to create AWS route table (Using Terraform v1.05 and the default AWS provider and trying to create a private and public route table for an EKS cluster but for some reason I’m encountering the following error when running terraform)July 14 Correct firewall and NAT rules for selective routing to speci

 By Mike Vizard on July 11, 2023A survey of more than 900 technologists and leaders in the United States, Europe, Australia, and India conducted by Pluralsight, a provider of an online platform for learning IT skills, finds that nearly two-thirds of respondents (65 percent) are working for organizations that employ multiple clouds. Still, only 9 percent report having any extensive experience with more than one cloud.In theory, the skills shortage should create a massive gap for managed service providers (MSPs) to fill. However, nearly three-quarters of respondents (74 percent) said they expect to increase investments in developing cloud skills. Artificial intelligence and machine learning are the most in-demand cloud skills (23 percent). The largest cloud skills gaps exist in data, analytics, engineering, and storage (42 percent), followed by security and governance (37 percent).MSPs must demonstrate their cloud expertiseThe challenge that MSPs face is convincing organizations to rely

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 11 Networks should be fast, redundant, dumb pipes. Host and proxy software should handle security/overlay features. Change my mind.Jul 11 Fortigate VPN IPsec with BGPJul 11 Seeking Study Material and Guidance for GCP Associate Exam PreparationJul 11 Across account access from Lambda to Access Point?Jul 10 Want to get into IT infrastructure...is CCNA my best bet? Jul 10 Education and Certification Survey (A chance to show off your ACE and

Following the CoPilot startup guide, I’m trying to enable the feature “CoPilot Security Group Management” from the Controller, but I got the following error:Add rule for [] failed:How can I enable this feature? Controller version: UserConnect-7.1.1710CoPilot version: v3.13.0 | Appliance v3Both Controller and CoPilot are deployed in the same Azure VNET, in different subnets

I created a basic infrstructure in Azure with terraform, consisting of 2 spoke gateways and 1 transit gateway.VNETs, Gateways and peerings are created correctly.  However, on the AirSpace Topology view, I can see the subnet and the controller object only for VNET1 and not for VNET2 and Transit VNET.What could be wrong? 

1. SSLT: IntroductionThe Aviatrix Self Service Launch Tool (SSLT) is the new community-supported tool that orchestrates the deployment of a multicloud infrastructure securing the cloud networking with the Aviatrix platform. The tool provides several interesting use cases that reflect world case scenarios. 2. Accessing SSLTLaunch the Aviatrix Self Service Launch Tool and click on the “Sign Up / Sign In with LinkedIn” button. Insert your LinkedIn credentials and then click on the “Sign in” button. Then you need to click on “Allow”. 3. SSLT PortalThe SSLT Portal provides two types of automated deployments:Distributed Cloud Firewall for Egress Aviatrix Secure Cloud Networking (Controller/CoPilot)     3.1. Distributed Cloud Firewall for EgressLet’s start exploring the first option (i.e. Distributed Cloud Firewall for Egress).Click on the “Begin Exploring” button.  3.1.1. Step 1 - Prerequisities: How to generate the License KeyFirst and foremost, click on the link “Aviatrix Secure Networking

I tried creating both an Azure VNET an Aviatrix gateway from CoPilot, but they both failed with the following error:[AVXERR-RBAC-0024] User does not have access to account MY_AZURE_SUBSCRIPTION to perform the current action  Note that both actions succeded if performed from the controller.The servce account I’m using for copilot is named SVC_CoPilot_usr, is part of the SVC_CoPilot permission group, which has “all_write” permissions.

Our topology replay keeps data from Dec 2022 until today. Actually, we are not interested in keeping data that far; and sincerely, it is a little bit of a nuisance during emergency because if something happens today, you end up spending time zooming in.Any idea how to prune this data? I reduced Topology Replay disk utilization to 2k records and I did not see any difference. Thanks, A 

Hello Community,were one can find the documentation and/or Postman collection for Controller RestAPI v7.0/v7.1?Thank you in advance

Hello Everyone,I'm reaching out to seek your expertise and insights on optimizing Intel Arc GPU performance within the Aviatrix ecosystem. As I recently acquired an Intel Arc GPU, I'm keen to make the most out of its capabilities while working with Aviatrix software. Are there any specific settings, drivers, or optimization techniques that you have found to be effective in maximizing performance and improving the visual experience when using Aviatrix with Intel Arc GPUs?I highly value your experiences and would greatly appreciate any personal tips, tricks, or best practices you can share specifically related to Intel Arc GPUs and their integration within the Aviatrix environment. Additionally, if there are any community-specific discussions or resources related to optimizing Intel Arc GPU within the Aviatrix ecosystem, I would love to explore them.Thank you all in advance for your valuable insights and assistance! 

To update the selfservice cloudformation template with the most recent changes, first navigate to Cloudformation in your AWS account. Next, select the region you are trying to update by selecting your region in the top-right of the site. Once you have done so, find the AviatrixSelfServiceDeploy stack, select it, and click “Update”. Then choose “Replace current template” → “Amazon S3 URL” and then enter this url: https://aviatrix-s3-public.s3.amazonaws.com/SelfService/cfn.ymlFinally, just click “Next” through the screens until the cloudformation starts the update.

As a former Head of Network Engineering at a global financial, I have witnessed the transformative power of cloud networks. The ability to scale resources dynamically, enhance collaboration, and increase operational efficiency has made cloud networks a cornerstone of modern business infrastructure.  We’re now moving into another exciting era of cloud networking whereby the security and cost control of cloud networks is paramount - given the sensitive data and critical applications moving to cloud, and the need to lower cloud cost and spend more strategically. Balancing these factors is key to maximize the benefits of the cloud while minimizing risks and maintaining financial sustainability. In this blog, I will delve into the mindset of a CIO/CTO and explore strategies to ensure a secure cloud network and cost control measures. Whilst some of the strategies mentioned below may seem obvious, the innovative and disruptive solutions from companies like Aviatrix may not feel so to everyone

Aviatrix Self Service Launch Tool FAQ1. What is the Aviatrix Self Service Launch Tool? The Aviatrix Self Service Launch Tool is a community-supported tool that enables users to deploy secure cloud networking use cases in minutes. It simplifies and automates the process of setting up secure cloud networks in popular cloud service providers like AWS, Azure, and others.2. How does the Aviatrix Self Service Launch Tool work? The tool provides a user-friendly interface where users can select the desired cloud networking use case and configure the necessary parameters. Once the configuration is complete, the tool provisions the required infrastructure and deploys the networking components automatically, saving time and effort.3. Is there a cost associated with using the Aviatrix Self Service Launch Tool? No, there is no cost for using the Aviatrix Self Service Launch Tool itself. However, please note that users are responsible for paying the license cost of the Aviatrix software and any appl

The SSLT Secure Egress use-case deploys a number of components to your AWS account in the region you specified. This includes:EC2 instances, keypairs, security groups, volumes An NLB and target group VPCs, subnets, route tables, nat gateway, etc EIPs and network interfaces An S3 bucket and contents IAM roles and policies KMS keysYou can see a listing of many of these items by searching with the AWS tag editor for ‘Owner:Aviatrix-SelfService’AWS Tag Editor Sample Link To clean up the infrastructure in your account, complete the items in the following order:Remove ‘termination protection’ from the EC2 instances ‘AviatrixController’ and ‘aviatrix-avx-ec2-spoke-selfservice’ Terminate all instances Delete the NLB ‘AVX-SelfService-EC2-NLB-Egress’ Delete the Target Group ‘AVX-SelfService-EC2-TG-Egress’ Delete all Keypairs with ‘selfservice’ in the name Delete the nat gateway aviatrix-selfservice-vpc-secure-egress-us-east-2a Delete the controller and copilot network interfaces Release Elastic

Great conversation on Reddit this week. Some great tips and reminders for seasoned or beginners. Worth a read! Check the Reddit out thread here and share your views below. 

Hey All, I have always been a very avid reader, Some books that have been very influential in my life have been books like “Who moved my Cheese” by Spencer Johnson and “How to win friends and influence people” by Dale Carnegie Here are some recent books I have added to my collection and they all have been really insightful Zero to One - Peter ThielAmp it up - Frank SlootmanThe Qualified Sales Leader - John McMahon5 Why’s - Majed RajehEscaping the Build Trap - Melissa PerriThe Alchemy of Growth - David A White, Mehrdad Baghai and Stephen ColeyThe Hybrid cloud Handbook for AWS - Tim McConnaughy I’ve just started “Cloud Auditing Best Practices” by Shinesa Cambridge and Michael Ratemo and it is pretty darn good! Please share some of the books you’ve been reading!  

The SSLT is built for production use-cases and scenarios, but there are situation when a team wants to deploy a use-case for quick testing, POV, POC or SRE needs and then destroy after the testing or validation is completedThe SSLT provides an automated way to delete or destroy a use-case or topology. Users are encouraged to use the automated option, but there might be situations when manual delete is needed. The delete function is provided to help. CSP Tags SSLT uses CSP tags to all the resources deployed by it. Users can search CSP tags as mentioned in the following steps and destroy the resources as needed (make sure dependency is followed).Search the CSP tag using Tag Editor called owner:self-service Destroy the resoruces as necessary Then search the CSP automation specific tag such as AWS. In AWS tag is called owner:self-service-cloudformatuon Destroy the resources as necessary AWS Tag Editor Sample Link Detailed instructions for AWS are mentioned here  

Aviatrix NAT Gateway Pricing calculations in US East (N. Virginia) Region730 hours in a month x 0.14 USD = 102.2 USD (Aviatrix NAT Gateway usage monthly cost)730 hours in a month x 0.016 USD = 11.68 USD (Aviatrix NAT Gateway t3.medium EC2 monthly cost)5,120 GB per month x 0.00 USD = 0.00 USD (Aviatrix NAT Gateway data processing monthly cost)102.2 USD + 11.68 USD + 0.00 USD = 113.88 USD (Aviatrix NAT Gateway monthly cost)Total Aviatrix NAT Gateway cost (monthly): 113.88 USD AWS NAT Gateway Pricing Calculation in US East (N. Virginia) Region730 hours in a month x 0.045 USD = 32.85 USD (AWS NAT Gateway usage monthly cost)5,120 GB per month x 0.045 USD = 230.40 USD (AWS NAT Gateway data processing monthly cost)32.85 USD + 230.40 USD = 263.25 USD (AWS NAT Gateway data processing and monthly cost)Total AWS NAT Gateway cost (monthly): 263.25 USDSo there is a cost saving for about 58% for this use-case.  Send email to selfservice@aviatrix.com if you have any question regarding the tool or thi

Aviatrix BGP Over LAN solution offers a simple and scalable way to extend network intelligence into Azure that preserves visibility, control, and usability. Multiple options exist to deploy this solution in Azure, giving customers the flexibility to choose the deployment that best serves their needs. The Aviatrix BGP Over LAN solution can also be leveraged in AWS and GCP by providing similar advantages with the same consistency, repeatability, and automation provided in Azure. About the Author Tim McConnaughy is a Senior Customer Solutions Architect at Aviatrix based in Raleigh, NC. Tim has worked with large customers and other Aviatrix Solutions Architects to create and validate these Azure design options. These designs have been validated and adopted by Aviatrix enterprise customers. Tim can be reached at tmcconnaughy@aviatrix.com. Technical ReviewersJorge Cortes, Principal Solutions ArchitectEmanuel Sifuentes, Principal Solutions ArchitectCharles O’Riordan, Senior Cloud Networking A

Aviatrix BGP Over LAN solution offers a simple and scalable way to extend network intelligence into Azure that preserves visibility, control, and usability. Multiple options exist to deploy this solution in Azure, giving customers the flexibility to choose the deployment that best serves their needs. The Aviatrix BGP Over LAN solution can also be leveraged in AWS and GCP by providing similar advantages with the same consistency, repeatability, and automation provided in Azure. About the Author Tim McConnaughy is a Senior Customer Solutions Architect at Aviatrix based in Raleigh, NC. Tim has worked with large customers and other Aviatrix Solutions Architects to create and validate these Azure design options. These designs have been validated and adopted by Aviatrix enterprise customers. Tim can be reached at tmcconnaughy@aviatrix.com. Technical ReviewersJorge Cortes, Principal Solutions ArchitectEmanuel Sifuentes, Principal Solutions ArchitectCharles O’Riordan, Senior Cloud Networking A