Skip to main content

Technical Forum

Ask any question related to cloud networking including AWS, Azure, GCP, OCI, and Aviatrix

299 Topics
T
Trevor_Patch.1Cadet
Asked in General
Aviatrix Terraform Provider - resource 'aviatrix_spoke_transit_attachment'

Hello Aviatrix Community, I am experimenting with the Terraform provider. I cannot seem to get the aviatrix_spoke_transit_attachment to work. I keep getting the error below, and it appears to be a catch 22? It is requiring that activemesh be disabled, but activemesh doesn't appear to be capable of being disabled when provisioning a transit or spoke via those Terraform resources. I've attempted to explicitly set the activemesh to disabled, but it turns on anyways & taints that TF resource.  With that said, I can attach my terraform-generated gateways in the Controller GUI (version 6.6) without issue, and I can replicate those URL Encoded actions via Python Requests without issue. Does anyone know any workarounds or simply point out what I am doing wrong?   ╷ │ Error: couldn't disable Active Mode for Aviatrix Transit Gateway: rest API disable_gateway_activemesh Post failed: Valid action required: disable_gateway_activemesh │ │   with aviatrix_transit_gate

480
D
2 years ago
J
Jose_GarciaCadet
Asked in Backbone
Aviatrix Transit VPC - DXGW

Today, we are using Aviatrix as TGW orchestrator only. We have AWS Direct Connect connections to two TGWs in different regions connecting to AWS Direct Connect Gateway. If we decide to deploy Aviatrix Transit VPC, do we still need AWS TGW? If not, how will I connect my on-prem to the Aviatrix Transit VPC?

360
Mark_Noorman
2 years ago
S
SuranjanCadet
Asked in Backbone
Aviatrix Transit VPC - Global or Regional

Hi, Apologies if this basic question has been answered already but could not find any reference Is  the Aviatrix Transit GW a regional service or Global ? Will the Solution work if I have 1 VPC in US-West and another VPC in US-East with the  Aviatrix Transit VPC in any of these regions ? or is it that we need to deploy 2 Transit VPCs - one each of US-West  &  US-East and interconnect both these VPCs for reachability ?

260
Jeff_Kouzmanoff
2 years ago
A
Andrew_SandovalCadet
Asked in General
Lost Routes from HA Gateway to Spokes

Has anyone had the issue of losing the routes between their HA Transit Egress gateways and spokes? We encountered this issue and all it took to rectify the issue was un-attaching then reattaching the spokes but don't seem to have a reason for why they lost the routes in the first place. 

120
A
2 years ago
L
Leroy_Lim.1Cadet
Asked in General
Sandbox Transit Timeout SST

Trying to deploy in AWS using the Sandbox but encountered the following error:   Connection to aws-ue2-transit-gw.aviatrixnetwork.com timed out. (connect timeout=4)')) │ Note, your VPC DNS Resolution must be set to Yes Also check your ACL rules below: Outbound - 0.0.0.0/0 ALL - allow Outbound - 0.0.0.0/0 ALL - deny Inbound - 0.0.0.0/0 ALL - allow Inbound - 0.0.0.0/0 ALL - deny │ │ with aviatrix_transit_gateway.aws_transit_gw, │ on aviatrix_aws.tf line 28, in resource "aviatrix_transit_gateway" "aws_transit_gw": │ 28: resource "aviatrix_transit_gateway" "aws_transit_gw" { │ ╵ ╷ │ failed to create Aviatrix Spoke Gateway: rest API create_spoke_gw Post failed: [AVXERR-TRANSIT-0118] Gateway initilization failed: Copying /tmp/AWS-UE2-Spoke2-GW/localgateway_info.txt to gateway AWS-UE2-Spoke2-GW host AWS-UE2-Spoke2-GW.aviatrixnetwork.com failed: HTTPSConnectionPool(host='aws-ue2-spoke2-gw.aviatrixnetwork.com', port=443): Max retries exceeded with url: /upload.php (Caused by ConnectT

280
P
2 years ago
Akinbola_Fatoye_CISSP
Akinbola_Fatoye_CISSPCadet
posted in General
Aviatrix Physical Appliance

Is there a specification for the Aviatrix physical appliance. 

00
Sagar_Murme.1
2 years ago
T
Timothy_RuddCadet
Asked in General
Warning on Terraform during Infrastructure as Code certification labs

Is this something I should be worried about? Am I doing something wrong in the Lab (1) or has terraform undergone some changes since the course was written? Plan goes ahead anyway, these are just warnings. Is there a way I can fix them?

120
T
2 years ago
G
Gilbert_UliuCadet
posted in General
Terraform Gateway

Hello,   Maybe someone can help me as I have no clue were the problem can be. I have deployed successfully via terraform successfully a Aviatrix Controller and a Co-Pilot, after that I have set up via terraform again a service principal that can deploy configuration ins inside the controller. Now my task is to deploy a VPC and a transit gateway. I have use this script https://github.com/terraform-aviatrix-modules/terraform-aviatrix-mc-transit   How the strange part is that terraform is creating the VPC successfully but for the gateway is failing with the below error.   But in reality the gateway is deployed successfully   Maybe someone has encounter the same problem using this terraform script?   Best Regards Gilbert

100
D
2 years ago
A
Ashish_ShuklaCadet
Asked in General
VPC Gateway with Private Network

Hi, I am working on Aviatrix MCNA and due to cyber requirements cannot run gateways in VPCs with Public IPs. Is there a way to run gateways with a private network subnet? Gateways in Hub can be on public subnets.

30
V
3 years ago
E
Erjan_KenjegaleeCadet
Asked in General
aviatrix is focusing mostly on networking btw various clouds?

is my understanding correct that most challenge in multi cloud lies in networking, access, making sure clouds can send data, communicate to each other?   aviatrix is resolving this complexity?

160
E
3 years ago
E
Erjan_KenjegaleeCadet
Asked in General
Aviatrix and Alibaba Cloud?

aviatrix platform is working compatible with alibaba or not? alibaba is pretty big cloud too. 

160
Shahzad Ali
3 years ago
S
Shashank_ShanbhagCadet
Asked in General
Logging into Aviatrix gateways and controller

Hi, I'm looking to ssh into aviatrix gateways and controller launched as part of the labs/sandbox starter. I don't see a ec2 keys associated with these instances. Is there a way to specify ec2 ssh key when launching the controller/gateways during launch? I don't see the option in the UI. I suspect it's forbidden/disallowed for obvious reasons. But, just trying my luck.  Thanks! 

350
C
3 years ago
H
Hua_Jack_FangCadet
Asked in General
Auto Private S3 access question

In the scenario above, does customer need to have the Aviatrix physical appliance installed at the on-premises site?   Thanks JF

50
H
3 years ago
H
Hua_Jack_FangCadet
Asked in General
Aviatrix centralized stateful firewall question

Hi there, In the Feature Overview Part 2 of Aviatrix Certified Engineer - Multi-Cloud Network Associate Course, the instructor introduced centralized stateful firewall and said "It's best for single GW use cases supported by single GW HA". Can I ask the reason why? Thanks. JF

30
H
3 years ago
H
Hua_Jack_FangCadet
Asked in General
Advanced use case of SDWAN integration

Hi there, Can I please have more design information of the SDWAN integration with Aviatrix like the diagram being shown in the course? Thanks JF

100
H
3 years ago
H
Hua_Jack_FangCadet
Asked in General
VNet Peering data charge in Azure Transit Option 1/2 via ExpressRoute Edge Routers

Hi guys, In the Azure Networking 101 course/video, the instructor said doing Azure Transit via ExpressRoute Edge Routers can avoid VNet Peering data charge. I don't quite get it as there is data charge still on those two VNet Peering between Spoke VNets and Hub VNet that ExpressRoute terminates, isn't there? Or he actually meant avoiding the data charge of VNet Peering between Spoke VNets? But what is the actual difference from commercial prospective? Traversing two VNet Peering through Hub VNet V.S. traversing one direct VNet Peering between two Spoke VNets. Thanks   JF

290
H
3 years ago
W
William_GuilhermeCadet
Asked in General
Aviatrix API Documentation

Hi there, Does anyone knows where I can find the Aviatrix API reference (Swagger) documentation? I remember seeing that in the past, and for some reason I can longer find it. Thank you

1860
R
3 years ago
Ahmed_Saifan
Ahmed_SaifanCadet
Asked in General
Can I create/delete AWS instance from aviatrix GUI?

Can I create/delete AWS instance from aviatrix GUI?

00
P
3 years ago
K
Karim_TarekCadet
Asked in General
Aviatrix controller high availability

Is it supported to deploy aviatrix controller across different clouds?

30
A
3 years ago
H
Harshan_RajanCadet
Asked in General
What Happens When You Decommission Aviatrix?

If a user decides to decommission Aviatrix completely, will the user's multi-cloud environment continue to function like before? Will any gateways and other components created by Aviatrix that are native to a particular cloud remain in place? For example, you may have configured routes or security groups or even launched instances through the Aviatrix controller. Will they remain functional?

210
Mark_Noorman
3 years ago
Mark_Noorman
Mark_NoormanFirst Officer
Asked in Security
Let's Encrypt for Controller SSL?

Hi everyone, I have an Aviatrix Controller deployed and would like to secure browser access with an SSL certificate. Let's Encrypt seems like an easy and cost effective method, however in order to use it I need SSH access to the Controller, which is disabled. If there's anyone that has successfully implemented this I'd love to hear the details! Thanks,   Mark

370
Mark_Noorman
3 years ago
N
Ni_ZhengquanCadet
Asked in General
Failed to install Aviatrix Cloud Controller at AWS using Sandbox Starter Tool

I was trying to spin up an Aviatrix Cloud Controller at AWS using Sandbox Starter Tool, but keep getting these errors: > The controller will be launched in us-east-1. Initializing modules... Initializing the backend... Initializing provider plugins... - Checking for available provider plugins... --> Controller launch failed, aborting. Registry service unreachable. This may indicate a network issue, or an issue with the requested Terraform Registry. Registry service unreachable. This may indicate a network issue, or an issue with the requested Terraform Registry. registry service is unreachable > If anyone has faced the same issue before, kindly help me to find a solution. I ran starter Tool as docker container in my laptop and accessing to Hashicorp registry is fine from my laptop, not sure why it complains Terraform registry service is unreachable. ===Debug Message== --> Controller SSH key already exists, skipping. --> OK. --> Now going to launch the controlle

1740
S
3 years ago
K
Karim_TarekCadet
Asked in General
Vnet in Azure

Hello everyone, I need your support for a question regarding Azure Vnet which I didn't get from the blog. Can a VNET span across multiple regions?

30
B
3 years ago
Shahzad Ali
Shahzad AliAviatrix Employee
posted in General
How does Aviatrix provide connectivity for SD-WAN branches?

Aviatrix support many ways to do this. Build an SD-WAN POP in a VPC/VNET with SD-WAN virtual appliances, and then northbound you build standards-based IPsec/GRE tunnels + BGP over Public or Private peerings to the Aviatrix transit. The aviatrix transits can be instantiated in any region or any cloud, as many as you want, wherever you want. So you can build a nice architecture where your SD-WAN remote sites terminate at the closest POP to where their cloud apps live. You can put the SD-WAN appliances in the same VPC /VNET as aviatrix transit and do IPsec/GRE + BGP OR you can do native BGP with no tunneling for higher throughput. You can connect Aviatrix transits via IPsec/GRE + BGP over the internet/MPLS/direct-connect/express route to an on-premise physical SD-WAN appliance. More details can be found on your Aviatrix Youtube Channel where Dana (SD-WAN Expert) has a lot of videos explaining the design and deploy. You can also send an email to info@aviatrix.com

90
Shahzad Ali
3 years ago
J
Jeffrey_HazelCadet
Asked in General
VPN CIDR Block

Hi I noticed the section on VPN gateways has stated the following:   Note a /24 VPN CIDR block supports about 64 simultaneous VPN clients. This is because for each connected VPN client, VPN gateways reserves 3 virtual addresses. For larger number of clients per VPN gateway, consider making the VPN CIDR block to a /22 or /20 network.   Is 'reservation of 3 virtual addresses' by VPN gateways is due to the Load balancing that can be implemented across the gateways?   Jeff

130
J
3 years ago

Recently Awarded Badges

Show all badges
Terms & Conditions