Technical Forum

Hello Everyone,I'm reaching out to seek your expertise and insights on optimizing Intel Arc GPU performance within the Aviatrix ecosystem. As I recently acquired an Intel Arc GPU, I'm keen to make the most out of its capabilities while working with Aviatrix software. Are there any specific settings, drivers, or optimization techniques that you have found to be effective in maximizing performance and improving the visual experience when using Aviatrix with Intel Arc GPUs?I highly value your experiences and would greatly appreciate any personal tips, tricks, or best practices you can share specifically related to Intel Arc GPUs and their integration within the Aviatrix environment. Additionally, if there are any community-specific discussions or resources related to optimizing Intel Arc GPU within the Aviatrix ecosystem, I would love to explore them.Thank you all in advance for your valuable insights and assistance! 

To update the selfservice cloudformation template with the most recent changes, first navigate to Cloudformation in your AWS account. Next, select the region you are trying to update by selecting your region in the top-right of the site. Once you have done so, find the AviatrixSelfServiceDeploy stack, select it, and click “Update”. Then choose “Replace current template” → “Amazon S3 URL” and then enter this url: https://aviatrix-s3-public.s3.amazonaws.com/SelfService/cfn.ymlFinally, just click “Next” through the screens until the cloudformation starts the update.

As a former Head of Network Engineering at a global financial, I have witnessed the transformative power of cloud networks. The ability to scale resources dynamically, enhance collaboration, and increase operational efficiency has made cloud networks a cornerstone of modern business infrastructure.  We’re now moving into another exciting era of cloud networking whereby the security and cost control of cloud networks is paramount - given the sensitive data and critical applications moving to cloud, and the need to lower cloud cost and spend more strategically. Balancing these factors is key to maximize the benefits of the cloud while minimizing risks and maintaining financial sustainability. In this blog, I will delve into the mindset of a CIO/CTO and explore strategies to ensure a secure cloud network and cost control measures. Whilst some of the strategies mentioned below may seem obvious, the innovative and disruptive solutions from companies like Aviatrix may not feel so to everyone

Aviatrix Self Service Launch Tool FAQ1. What is the Aviatrix Self Service Launch Tool? The Aviatrix Self Service Launch Tool is a community-supported tool that enables users to deploy secure cloud networking use cases in minutes. It simplifies and automates the process of setting up secure cloud networks in popular cloud service providers like AWS, Azure, and others.2. How does the Aviatrix Self Service Launch Tool work? The tool provides a user-friendly interface where users can select the desired cloud networking use case and configure the necessary parameters. Once the configuration is complete, the tool provisions the required infrastructure and deploys the networking components automatically, saving time and effort.3. Is there a cost associated with using the Aviatrix Self Service Launch Tool? No, there is no cost for using the Aviatrix Self Service Launch Tool itself. However, please note that users are responsible for paying the license cost of the Aviatrix software and any appl

The SSLT Secure Egress use-case deploys a number of components to your AWS account in the region you specified. This includes:EC2 instances, keypairs, security groups, volumes An NLB and target group VPCs, subnets, route tables, nat gateway, etc EIPs and network interfaces An S3 bucket and contents IAM roles and policies KMS keysYou can see a listing of many of these items by searching with the AWS tag editor for ‘Owner:Aviatrix-SelfService’AWS Tag Editor Sample Link To clean up the infrastructure in your account, complete the items in the following order:Remove ‘termination protection’ from the EC2 instances ‘AviatrixController’ and ‘aviatrix-avx-ec2-spoke-selfservice’ Terminate all instances Delete the NLB ‘AVX-SelfService-EC2-NLB-Egress’ Delete the Target Group ‘AVX-SelfService-EC2-TG-Egress’ Delete all Keypairs with ‘selfservice’ in the name Delete the nat gateway aviatrix-selfservice-vpc-secure-egress-us-east-2a Delete the controller and copilot network interfaces Release Elastic

Great conversation on Reddit this week. Some great tips and reminders for seasoned or beginners. Worth a read! Check the Reddit out thread here and share your views below. 

Hey All, I have always been a very avid reader, Some books that have been very influential in my life have been books like “Who moved my Cheese” by Spencer Johnson and “How to win friends and influence people” by Dale Carnegie Here are some recent books I have added to my collection and they all have been really insightful Zero to One - Peter ThielAmp it up - Frank SlootmanThe Qualified Sales Leader - John McMahon5 Why’s - Majed RajehEscaping the Build Trap - Melissa PerriThe Alchemy of Growth - David A White, Mehrdad Baghai and Stephen ColeyThe Hybrid cloud Handbook for AWS - Tim McConnaughy I’ve just started “Cloud Auditing Best Practices” by Shinesa Cambridge and Michael Ratemo and it is pretty darn good! Please share some of the books you’ve been reading!  

The SSLT is built for production use-cases and scenarios, but there are situation when a team wants to deploy a use-case for quick testing, POV, POC or SRE needs and then destroy after the testing or validation is completedThe SSLT provides an automated way to delete or destroy a use-case or topology. Users are encouraged to use the automated option, but there might be situations when manual delete is needed. The delete function is provided to help. CSP Tags SSLT uses CSP tags to all the resources deployed by it. Users can search CSP tags as mentioned in the following steps and destroy the resources as needed (make sure dependency is followed).Search the CSP tag using Tag Editor called owner:self-service Destroy the resoruces as necessary Then search the CSP automation specific tag such as AWS. In AWS tag is called owner:self-service-cloudformatuon Destroy the resources as necessary AWS Tag Editor Sample Link Detailed instructions for AWS are mentioned here  

Aviatrix NAT Gateway Pricing calculations in US East (N. Virginia) Region730 hours in a month x 0.14 USD = 102.2 USD (Aviatrix NAT Gateway usage monthly cost)730 hours in a month x 0.016 USD = 11.68 USD (Aviatrix NAT Gateway t3.medium EC2 monthly cost)5,120 GB per month x 0.00 USD = 0.00 USD (Aviatrix NAT Gateway data processing monthly cost)102.2 USD + 11.68 USD + 0.00 USD = 113.88 USD (Aviatrix NAT Gateway monthly cost)Total Aviatrix NAT Gateway cost (monthly): 113.88 USD AWS NAT Gateway Pricing Calculation in US East (N. Virginia) Region730 hours in a month x 0.045 USD = 32.85 USD (AWS NAT Gateway usage monthly cost)5,120 GB per month x 0.045 USD = 230.40 USD (AWS NAT Gateway data processing monthly cost)32.85 USD + 230.40 USD = 263.25 USD (AWS NAT Gateway data processing and monthly cost)Total AWS NAT Gateway cost (monthly): 263.25 USDSo there is a cost saving for about 58% for this use-case.  Send email to selfservice@aviatrix.com if you have any question regarding the tool or thi

Aviatrix BGP Over LAN solution offers a simple and scalable way to extend network intelligence into Azure that preserves visibility, control, and usability. Multiple options exist to deploy this solution in Azure, giving customers the flexibility to choose the deployment that best serves their needs. The Aviatrix BGP Over LAN solution can also be leveraged in AWS and GCP by providing similar advantages with the same consistency, repeatability, and automation provided in Azure. About the Author Tim McConnaughy is a Senior Customer Solutions Architect at Aviatrix based in Raleigh, NC. Tim has worked with large customers and other Aviatrix Solutions Architects to create and validate these Azure design options. These designs have been validated and adopted by Aviatrix enterprise customers. Tim can be reached at tmcconnaughy@aviatrix.com. Technical ReviewersJorge Cortes, Principal Solutions ArchitectEmanuel Sifuentes, Principal Solutions ArchitectCharles O’Riordan, Senior Cloud Networking A

Aviatrix BGP Over LAN solution offers a simple and scalable way to extend network intelligence into Azure that preserves visibility, control, and usability. Multiple options exist to deploy this solution in Azure, giving customers the flexibility to choose the deployment that best serves their needs. The Aviatrix BGP Over LAN solution can also be leveraged in AWS and GCP by providing similar advantages with the same consistency, repeatability, and automation provided in Azure. About the Author Tim McConnaughy is a Senior Customer Solutions Architect at Aviatrix based in Raleigh, NC. Tim has worked with large customers and other Aviatrix Solutions Architects to create and validate these Azure design options. These designs have been validated and adopted by Aviatrix enterprise customers. Tim can be reached at tmcconnaughy@aviatrix.com. Technical ReviewersJorge Cortes, Principal Solutions ArchitectEmanuel Sifuentes, Principal Solutions ArchitectCharles O’Riordan, Senior Cloud Networking A

This article is about a journey of a customer from on-prem edge location to public cloud. The best part is that this journey is applicable to almost 80% of customers so it is easily adoptable without boiling the ocean or without disrupting anything you already have in place.  

This article is about a journey of a customer from on-prem edge location to public cloud. The best part is that this journey is applicable to almost 80% of customers so it is easily adoptable without boiling the ocean or without disrupting anything you already have in place.  

Can anyone help me in creating customer id and controller name from terraform instead of Aviatrix UI

how do one get certified, and how much is the cert fee?

Can someone help me with more information on a feature with Aviatrix that can help identify and isolate the network from issues that occur in Multicloud to on-prem scenario? I remember this was discussed in the online class I attended.

Hello Team,I didn't saw IPv6 related config in Aviatrix SE deployment work flow 2.0, can someone confirm?Category: Network Edge 

Currently we have in our environment too many AWS Peerings and we are considering enabling Connected Transit and let Aviatrix manage inter-VPC communication. I would like the transition to be as transparent as possible for our end users; thus I have few questions:Will the AWS Peerings conflict after I enable Connected Transit? When do you delete the AWS Peerings, before or after enabling Connected Transit? Was there a significant change in cost regarding data transfer now all traffic is going thru the Spoke Gateeways?I am interested in learning from you experience. thx Antonio

  A candid chat with Sr Manager of Application Development Asif Masood  In this episode Asif shares some golden nuggets learned during his extensive career in technology. From mainframe programmer to managing databases, transitioning to leading back-office architects at Sear Holdings Corp where he also led the migrations into AWS. His most recent role at True Value where he was the Senior App Dev Manager leading infrastructure migrations from on-prem into GCP and where he ran into and met the folks at aviatrix.Some golden nuggets and words of wisdom from Asif:As each cloud providers close the gaps on core capabilities, cost is becoming an important deciding factor on which cloud provider to use - AWS is the most mature but could be too expensive for many customers GCP offered the most cost effective option for windows migrationsUsing cloud MSP partner (HCL) helped them get best pricing as they were already embedded at true value providing managed support Manual and DIY  cloud networkin

Written by John Gonsalves #Aviatrix Secure Edge makes it simple to extend cloud networking and security to the edge!  During their public cloud journey, IT leaders often ask themselves, “How do we — as securely and as seamlessly as possible — bring public cloud/s closer to end-users and services that continue to reside on-prem. The very nature of doing this creates new challenges — applications are being developed at pace and scale, and therefore the ability to connect public cloud outward to the edge of on-prem becomes reliant on infrastructure that needs to always be available, performant, scalable, secure, and cost efficient. Short reminder of some of the key challenges:Installation and setup of on-prem network edge infrastructure is often very time-consuming and costly, resulting in significant delays. Network automation (in cloud vs on-prem) is done differently, which causes increased time to onboard. The on-prem network architecture team may be disjointed from cloud teams, creati

Hot Buttons 

Does Aviatrix secure edge supports dual stack?

I have installed the aviatrix vpn client on my system for the first time, but I am receiving the below error. I have verified my internet connection is good and restarted the Aviatrix VPN service in services option.   os : windows 10

To make it short:we are classifying spokes in security domains and isolate these domains from each other. That can be extended to multi-cloud, on-prem, vpn. (More details)Let’s focus on AWS TGW today…There is also feature called “TGW Orchestration” which allows Aviatrix controller to program TGW and manage its RTB and also utilizing these security domains. It is pretty powerful but has one big limitation – we are able to extend segmentation only to EDGE transit domain. So if you peer this Transit to another Aviatrix transit pair in a different CSP you will not see them. That’s why we are going to build it differently – by defining Connections between Aviatrix Transit and  AWS TGW. With Connection definition we can extend it further and fully utilize potential given with MCNA (Multi-Cloud Network Architecture) by Aviatrix. Sometimes you just might not be the owner of TGW and you just need to do it that way. Desired Topology  When defining connection you need to be aware how Aviatrix Gat

One of the way to provide connectivity from AWS to AVX is via IPSEC tunnels. There are however few limitations in regard to that. Throughput is the biggest concern there. We can of course increase number connections and it serves its purpose well, but lets do it a little bit differently.  We will leverage different type of TGW attachment  (CONNECT). In order to do that we need to have our Aviatrix TrGW deployed in AWS and build underlay for our GRE tunnels. This underlay is actually another attachment type (well known – VPC ATTACHMENT). Important note:‘You can create up to 4 Transit Gateway Connect peers per Connect attachment (up to 20 Gbps in total bandwidth per Connect attachment), as long as the underlying transport (VPC or AWS Direct Connect) attachment supports the required bandwidth” There is also another factor when thinking about such a high bandwidth – Aviatrix TrGW CPU – instance size basically. Why connecting AWS TGW with Aviatrix TrGW that way? Why not using just Aviatrix