Technical Forum

Ask any question related to cloud networking including AWS, Azure, GCP, OCI, and Aviatrix

Jennifer TAviatrix Employee

posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, August 1, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditAug 1 Unknown Virtual Networks Someone before our time here at this org created a bunch of Vnets with no tags and the keyword "CDP"Aug 1 What resources would you recommend to learn IT Engineering? Career AdviceAug 1 Fortinet & Azure vWAN NVA - Has anyone any experience? We are in the process of trying to decide between integrating a Fortinet NVA into Azure vWAN against deploying a HA pair of VM's in a separate spokeStack OverflowAug 1 How to

1 month ago

Jessica_MacGregorAviatrix Employee

posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, July 28, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries: RedditJul 28 Is there a 'boil me like a frog' slow approach to learning basic network automation?Jul 28 Network automation use casesJul 28 Blogpost Friday!Jul 28 A cool guide about comparing cloud computing services between the giants of the industry. (Shout out to all you visual learners!)Jul 27 Why did you choose to use a 3rd party load balancer in the cloud instead of a native load balancer?Jul 27 Too Many Cooks, Too Little Documentation… (Questio

1 month ago

Rodman_StuhlmullerCadet

posted in Self Service Launch Tool

Error: The bucket you tried to delete is not empty

***Before deleting the Cloudformation Stack, make sure that you have successfully completed the ‘Destroy’ option in the SelfService tool because this will remove any logs of your deployment and you will be unable to destroy in the future. In order to successfully delete the cloud formation stack, you must first make sure your bucket is empty. To do this, navigate to https://s3.console.aws.amazon.com/s3/home in your account and find the bucket named something like “aviatrix-s3-{region}-selfservice-{accountId}”. Click on the radio button to the left of the bucket name, then find “Empty” in the top right of the list. Follow the steps to empty our bucket and then retry ‘Delete’ on the Cloudformation stack.

1 month ago

Jennifer TAviatrix Employee

posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 25, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 25 Is a private NAT gateway the correct solution (In the process of planning a VPN migration from an on prem datacenter to AWS)July 25 Question regarding landing zone using azure-caf terraform supermoduleJuly 25 How did you get into a cloud engineer or cyber security position?July 25 Any tips/advice for D315? (Network and Security - Foundations)July 25 Recommendations for resources on learning networking for securityStack OverflowJuly 25 Ho

1 month ago

Katie HolmsAviatrix Employee

posted in General

Any cloud networking and security folks going to AWS Summit NY (July 26)?

Is anyone attending the AWS Summit in New York this Wednesday, July 26th? Having attended last year, I found that the AWS Summit was a great opportunity to connect with customers, partners, peers, and vendors supplying services within AWS. This provided great insight into the power of AWS and many platforms to help enhance an organizations of utilization of AWS in order to truly meet the business needs of the company. I’m looking forward to learning about how security continues to be enhanced in AWS and to protect the applications running within. In addition, I’m looking forward to understanding how to build out solutions that not only meet the technical objectives but also keep costs and the business in mind this year! I am excited to see you on Wednesday at Booth #235 and hope that if you’re traveling in from out of town you have the opportunity to walk around and explore NYC and all that it has to offer! Will you be in NY this week? What’s your advice for those attending the AWS Sum

2 months ago

Jessica_MacGregorAviatrix Employee

posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, July 21, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 21 Advice For Those New to Network EngineeringJul 21 Pentesting Azure CloudJul 21 Do you guys have IT degrees or just certifications?Jul 21 Silly VPN questionJul 21 Blogpost Friday! (A regular – great place to share your blog posts, or interesting pieces you’ve read lately!)Jul 21 Cisco Secure Cloud Analytics (Seeking alternatives)Jul 20 Firewall rules - descriptionsJul 19 Small companies’ firewall best practicesJul 19 In need of help to

2 months ago

Jennifer TAviatrix Employee

posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 18 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 18 Connect many sites on many clouds. What are my options? (My company is planning to deploy a solution that spans AWS and Azure and on prem sites…) July 18 Terraform Code Migration (His team recently got handed ownership of our terraform code for our azure landing zone.) July 18 vNet Design Question – Subnetting and Load Balancer placement July 17 How granular do you get with your TF files? July 17 Next job: a medium company vs a large one

2 months ago

BigoSecond Officer

Asked in General

AWS onboarding as secondary CSP

I have my Aviatrix controller deployed in Azure, and I’d like to start managing AWS resources.I couldn’t find where the documentation for onboarding AWS account is.I could only find docs aboutusing AWS as the first CSP, where the controller lives.Can anyone sahre some tutorial for onboarding AWS accounts as secondary CSP?

2 months ago

Jennifer TAviatrix Employee

posted in General

Answer This: Reddit and Stack Overflow Roundup for Friday, July 14, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, please share the link to your responses back to this post so others in the community can follow you!Here are today’s queries and have a great weekend!RedditJuly 14 Favorite firewall you worked on?July 14 Any advice on vNet design for large number of networksJuly 14 Unable to create AWS route table (Using Terraform v1.05 and the default AWS provider and trying to create a private and public route table for an EKS cluster but for some reason I’m encountering the following error when running terraform)July 14 Correct firewall and NAT rules for selective routing to speci

2 months ago

Jennifer TAviatrix Employee

posted in General

Industry Article: Lack of Cloud Expertise Creates Gaps for MSPs to Fill | July 12, 2023

By Mike Vizard on July 11, 2023A survey of more than 900 technologists and leaders in the United States, Europe, Australia, and India conducted by Pluralsight, a provider of an online platform for learning IT skills, finds that nearly two-thirds of respondents (65 percent) are working for organizations that employ multiple clouds. Still, only 9 percent report having any extensive experience with more than one cloud.In theory, the skills shortage should create a massive gap for managed service providers (MSPs) to fill. However, nearly three-quarters of respondents (74 percent) said they expect to increase investments in developing cloud skills. Artificial intelligence and machine learning are the most in-demand cloud skills (23 percent). The largest cloud skills gaps exist in data, analytics, engineering, and storage (42 percent), followed by security and governance (37 percent).MSPs must demonstrate their cloud expertiseThe challenge that MSPs face is convincing organizations to rely

2 months ago

Jessica_MacGregorAviatrix Employee

posted in General

Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 11, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 11 Networks should be fast, redundant, dumb pipes. Host and proxy software should handle security/overlay features. Change my mind.Jul 11 Fortigate VPN IPsec with BGPJul 11 Seeking Study Material and Guidance for GCP Associate Exam PreparationJul 11 Across account access from Lambda to Access Point?Jul 10 Want to get into IT infrastructure...is CCNA my best bet? Jul 10 Education and Certification Survey (A chance to show off your ACE and

2 months ago

BigoSecond Officer

Asked in General

Cannot enable CoPilot Security Group Management

Following the CoPilot startup guide, I’m trying to enable the feature “CoPilot Security Group Management” from the Controller, but I got the following error:Add rule for [] failed:How can I enable this feature? Controller version: UserConnect-7.1.1710CoPilot version: v3.13.0 | Appliance v3Both Controller and CoPilot are deployed in the same Azure VNET, in different subnets

2 months ago

BigoSecond Officer

Asked in General

Copilot AirSpace Topology not showing all gateways

I created a basic infrstructure in Azure with terraform, consisting of 2 spoke gateways and 1 transit gateway.VNETs, Gateways and peerings are created correctly. However, on the AirSpace Topology view, I can see the subnet and the controller object only for VNET1 and not for VNET2 and Transit VNET.What could be wrong?

2 months ago

JoeAviatrix Employee

posted in Self Service Launch Tool

Aviatrix Self Service Launch Tool (SSLT): Walkthrough Guide

1. SSLT: IntroductionThe Aviatrix Self Service Launch Tool (SSLT) is the new community-supported tool that orchestrates the deployment of a multicloud infrastructure securing the cloud networking with the Aviatrix platform. The tool provides several interesting use cases that reflect world case scenarios. 2. Accessing SSLTOpen the Aviatrix Self Service Launch Tool and then Sign Up / Sign In usi You need to click on “Allow”. 3. Distributed Clound Firewall for Egress 3.1.1. Step 1 - Prerequisities: How to generate the License KeyFirst and foremost, click on the link “Aviatrix Secure Networking Platform Metered 2208-Universal 24x7 Support”. Click on “View purchase options”. Sign in to you AWS account. Click on the “Subscribe” button within the Purchase section, as depicted below. Click on “Set up your account” at the top-right corner. Insert your Email and then click on “Verify Email” button. After a few seconds you will get a notification message in a green banner, confirming that a Veri

2 months ago

skriptdakidCadet

Asked in General

Sandbox Starter Tool Setup

The link in the SBST documentation points to a marketplace subscription that is no longer available to opt-in to. The TF script failed due to this issue also. Will there be a fix for this soon?

2 months ago

BigoSecond Officer

Asked in General

Resource Creation failed from CoPilot

I tried creating both an Azure VNET an Aviatrix gateway from CoPilot, but they both failed with the following error:[AVXERR-RBAC-0024] User does not have access to account MY_AZURE_SUBSCRIPTION to perform the current action Note that both actions succeded if performed from the controller.The servce account I’m using for copilot is named SVC_CoPilot_usr, is part of the SVC_CoPilot permission group, which has “all_write” permissions.

2 months ago

vivas

Asked in General

How to limit topology replay to the last 3 months

Our topology replay keeps data from Dec 2022 until today. Actually, we are not interested in keeping data that far; and sincerely, it is a little bit of a nuisance during emergency because if something happens today, you end up spending time zooming in.Any idea how to prune this data? I reduced Topology Replay disk utilization to 2k records and I did not see any difference. Thanks, A

2 months ago

Neven1986Cadet

Asked in General

Rest API 7.0 or 7.1

Hello Community,were one can find the documentation and/or Postman collection for Controller RestAPI v7.0/v7.1?Thank you in advance

2 months ago

halldaniela201Cadet

Asked in General

Seeking Recommendations for Optimizing Intel Graphics Performance on Aviatrix Community

Hello Everyone,I'm reaching out to seek your expertise and insights on optimizing Intel Arc GPU performance within the Aviatrix ecosystem. As I recently acquired an Intel Arc GPU, I'm keen to make the most out of its capabilities while working with Aviatrix software. Are there any specific settings, drivers, or optimization techniques that you have found to be effective in maximizing performance and improving the visual experience when using Aviatrix with Intel Arc GPUs?I highly value your experiences and would greatly appreciate any personal tips, tricks, or best practices you can share specifically related to Intel Arc GPUs and their integration within the Aviatrix environment. Additionally, if there are any community-specific discussions or resources related to optimizing Intel Arc GPU within the Aviatrix ecosystem, I would love to explore them.Thank you all in advance for your valuable insights and assistance!

3 months ago

Rodman_StuhlmullerCadet

posted in Self Service Launch Tool

How do I update the SelfService CloudFormation template in AWS?

To update the selfservice cloudformation template with the most recent changes, first navigate to Cloudformation in your AWS account. Next, select the region you are trying to update by selecting your region in the top-right of the site. Once you have done so, find the AviatrixSelfServiceDeploy stack, select it, and click “Update”. Then choose “Replace current template” → “Amazon S3 URL” and then enter this url: https://aviatrix-s3-public.s3.amazonaws.com/SelfService/cfn.ymlFinally, just click “Next” through the screens until the cloudformation starts the update.

3 months ago

John_GonsalvesAviatrix Employee

published in Security

Securing Cloud Networks: Strategies and Insights from a CTO

As a former Head of Network Engineering at a global financial, I have witnessed the transformative power of cloud networks. The ability to scale resources dynamically, enhance collaboration, and increase operational efficiency has made cloud networks a cornerstone of modern business infrastructure. We’re now moving into another exciting era of cloud networking whereby the security and cost control of cloud networks is paramount - given the sensitive data and critical applications moving to cloud, and the need to lower cloud cost and spend more strategically. Balancing these factors is key to maximize the benefits of the cloud while minimizing risks and maintaining financial sustainability. In this blog, I will delve into the mindset of a CIO/CTO and explore strategies to ensure a secure cloud network and cost control measures. Whilst some of the strategies mentioned below may seem obvious, the innovative and disruptive solutions from companies like Aviatrix may not feel so to everyone

180

3 months ago

Shahzad AliAviatrix Employee

posted in Self Service Launch Tool

Aviatrix Self Service Launch Tool FAQ

Aviatrix Self Service Launch Tool FAQ1. What is the Aviatrix Self Service Launch Tool? The Aviatrix Self Service Launch Tool is a community-supported tool that enables users to deploy secure cloud networking use cases in minutes. It simplifies and automates the process of setting up secure cloud networks in popular cloud service providers like AWS, Azure, and others.2. How does the Aviatrix Self Service Launch Tool work? The tool provides a user-friendly interface where users can select the desired cloud networking use case and configure the necessary parameters. Once the configuration is complete, the tool provisions the required infrastructure and deploys the networking components automatically, saving time and effort.3. Is there a cost associated with using the Aviatrix Self Service Launch Tool? No, there is no cost for using the Aviatrix Self Service Launch Tool itself. However, please note that users are responsible for paying the license cost of the Aviatrix software and any appl

3 months ago

John_SmokerAviatrix Employee

posted in Self Service Launch Tool

Aviatrix Self Service Launch Tool (SSLT): AWS: Manual clean up for the "Secure Egress" use-case infrastructure

The SSLT Secure Egress use-case deploys a number of components to your AWS account in the region you specified. This includes:EC2 instances, keypairs, security groups, volumes An NLB and target group VPCs, subnets, route tables, nat gateway, etc EIPs and network interfaces An S3 bucket and contents IAM roles and policies KMS keysYou can see a listing of many of these items by searching with the AWS tag editor for ‘Owner:Aviatrix-SelfService’AWS Tag Editor Sample Link To clean up the infrastructure in your account, complete the items in the following order:Remove ‘termination protection’ from the EC2 instances ‘AviatrixController’ and ‘aviatrix-avx-ec2-spoke-selfservice’ Terminate all instances Delete the NLB ‘AVX-SelfService-EC2-NLB-Egress’ Delete the Target Group ‘AVX-SelfService-EC2-TG-Egress’ Delete all Keypairs with ‘selfservice’ in the name Delete the nat gateway aviatrix-selfservice-vpc-secure-egress-us-east-2a Delete the controller and copilot network interfaces Release Elastic

3 months ago

Page 2 / 7

Technical Forum

Recently Awarded Badges

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded