Skip to main content

Technical Forum

Ask any question related to cloud networking including AWS, Azure, GCP, OCI, and Aviatrix

331 Topics
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Friday, August 4, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries: RedditAug 4 Good independent SD-WAN options?Aug 4 Blogpost Friday! (Share yours and others’!)Aug 4 Telecom guy trying to switch gears into a networking/IT roleAug 3 IP addressing, DHCP, and multiple sites best practice?Aug 3 Complete Network Rebuild - Advice neededAug 3 Junior Network Engineer Resources (Looking for certifications and advice)Aug 3 Using GPT To prepare for SAP-C02Aug 3 Multicloud cost management dashboard (CostIQ) Aug 2 Certificates (

280
Jessica_MacGregor
Jennifer T
Jennifer TAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Tuesday, August 1, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditAug 1 Unknown Virtual Networks Someone before our time here at this org created a bunch of Vnets with no tags and the keyword "CDP"Aug 1 What resources would you recommend to learn IT Engineering? Career AdviceAug 1 Fortinet & Azure vWAN NVA - Has anyone any experience? We are in the process of trying to decide between integrating a Fortinet NVA into Azure vWAN against deploying a HA pair of VM's in a separate spokeStack OverflowAug 1 How to

280
Jennifer T
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Friday, July 28, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries: RedditJul 28 Is there a 'boil me like a frog' slow approach to learning basic network automation?Jul 28 Network automation use casesJul 28 Blogpost Friday!Jul 28 A cool guide about comparing cloud computing services between the giants of the industry. (Shout out to all you visual learners!)Jul 27 Why did you choose to use a 3rd party load balancer in the cloud instead of a native load balancer?Jul 27 Too Many Cooks, Too Little Documentation… (Questio

370
Jessica_MacGregor
R
Rodman_StuhlmullerCadet
posted in Self Service Launch Tool
Error: The bucket you tried to delete is not empty

***Before deleting the Cloudformation Stack, make sure that you have successfully completed the ‘Destroy’ option in the SelfService tool because this will remove any logs of your deployment and you will be unable to destroy in the future.  In order to successfully delete the cloud formation stack, you must first make sure your bucket is empty. To do this, navigate to https://s3.console.aws.amazon.com/s3/home in your account and find the bucket named something like “aviatrix-s3-{region}-selfservice-{accountId}”. Click on the radio button to the left of the bucket name, then find “Empty” in the top right of the list. Follow the steps to empty our bucket and then retry ‘Delete’ on the Cloudformation stack.

970
R
Jennifer T
Jennifer TAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 25, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 25 Is a private NAT gateway the correct solution (In the process of planning a VPN migration from an on prem datacenter to AWS)July 25 Question regarding landing zone using azure-caf terraform supermoduleJuly 25 How did you get into a cloud engineer or cyber security position?July 25 Any tips/advice for D315? (Network and Security - Foundations)July 25 Recommendations for resources on learning networking for securityStack OverflowJuly 25 Ho

260
Jennifer T
Katie Holms
Katie HolmsAviatrix Employee
posted in General
Any cloud networking and security folks going to AWS Summit NY (July 26)?  

Is anyone attending the AWS Summit in New York this Wednesday, July 26th? Having attended last year, I found that the AWS Summit was a great opportunity to connect with customers, partners, peers, and vendors supplying services within AWS. This provided great insight into the power of AWS and many platforms to help enhance an organizations of utilization of AWS in order to truly meet the business needs of the company. I’m looking forward to learning about how security continues to be enhanced in AWS and to protect the applications running within. In addition, I’m looking forward to understanding how to build out solutions that not only meet the technical objectives but also keep costs and the business in mind this year! I am excited to see you on Wednesday at Booth #235 and hope that if you’re traveling in from out of town you have the opportunity to walk around and explore NYC and all that it has to offer! Will you be in NY this week? What’s your advice for those attending the AWS Sum

370
Katie Holms
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Friday, July 21, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 21 Advice For Those New to Network EngineeringJul 21 Pentesting Azure CloudJul 21 Do you guys have IT degrees or just certifications?Jul 21 Silly VPN questionJul 21 Blogpost Friday! (A regular – great place to share your blog posts, or interesting pieces you’ve read lately!)Jul 21 Cisco Secure Cloud Analytics (Seeking alternatives)Jul 20 Firewall rules - descriptionsJul 19 Small companies’ firewall best practicesJul 19 In need of help to

340
Jessica_MacGregor
Jennifer T
Jennifer TAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 18 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you!Here are today’s queries:RedditJuly 18 Connect many sites on many clouds. What are my options? (My company is planning to deploy a solution that spans AWS and Azure and on prem sites…) July 18 Terraform Code Migration (His team recently got handed ownership of our terraform code for our azure landing zone.) July 18 vNet Design Question – Subnetting and Load Balancer placement July 17 How granular do you get with your TF files? July 17 Next job: a medium company vs a large one

351
Nick_Davitashvili.1
Bigo
BigoSecond Officer
Asked in General
AWS onboarding as secondary CSP

I have my Aviatrix controller deployed in Azure, and I’d like to start managing AWS resources.I couldn’t find where the documentation for onboarding AWS account is.I could only find docs aboutusing AWS as the first CSP, where the controller lives.Can anyone sahre some tutorial for  onboarding AWS accounts as secondary CSP?

943
Nico
Jennifer T
Jennifer TAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Friday, July 14, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections.If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, please share the link to your responses back to this post so others in the community can follow you!Here are today’s queries and have a great weekend!RedditJuly 14 Favorite firewall you worked on?July 14 Any advice on vNet design for large number of networksJuly 14 Unable to create AWS route table (Using Terraform v1.05 and the default AWS provider and trying to create a private and public route table for an EKS cluster but for some reason I’m encountering the following error when running terraform)July 14 Correct firewall and NAT rules for selective routing to speci

342
Nick_Davitashvili.1
Jennifer T
Jennifer TAviatrix Employee
posted in General
Industry Article: Lack of Cloud Expertise Creates Gaps for MSPs to Fill | July 12, 2023

 By Mike Vizard on July 11, 2023A survey of more than 900 technologists and leaders in the United States, Europe, Australia, and India conducted by Pluralsight, a provider of an online platform for learning IT skills, finds that nearly two-thirds of respondents (65 percent) are working for organizations that employ multiple clouds. Still, only 9 percent report having any extensive experience with more than one cloud.In theory, the skills shortage should create a massive gap for managed service providers (MSPs) to fill. However, nearly three-quarters of respondents (74 percent) said they expect to increase investments in developing cloud skills. Artificial intelligence and machine learning are the most in-demand cloud skills (23 percent). The largest cloud skills gaps exist in data, analytics, engineering, and storage (42 percent), followed by security and governance (37 percent).MSPs must demonstrate their cloud expertiseThe challenge that MSPs face is convincing organizations to rely

270
Jennifer T
Jessica_MacGregor
Jessica_MacGregorAviatrix Employee
posted in General
Answer This: Reddit and Stack Overflow Roundup for Tuesday, July 11, 2023

Every day, people visit forums like Reddit and Stack Overflow seeking expert advice about cloud networking and security. We comb through those posts and curate a list of discussions and questions that you – the experts – might find interesting or solvable. Less time searching, more time making connections. If you’re new to Reddit or Stack Overflow, some starting tips are below. And if you do respond to any of these threads, share the link to your responses back to this post so others in the community can follow you! Here are today’s queries: RedditJul 11 Networks should be fast, redundant, dumb pipes. Host and proxy software should handle security/overlay features. Change my mind.Jul 11 Fortigate VPN IPsec with BGPJul 11 Seeking Study Material and Guidance for GCP Associate Exam PreparationJul 11 Across account access from Lambda to Access Point?Jul 10 Want to get into IT infrastructure...is CCNA my best bet? Jul 10 Education and Certification Survey (A chance to show off your ACE and

873
Nick_Davitashvili.1
Bigo
BigoSecond Officer
Asked in General
Cannot enable CoPilot Security Group Management

Following the CoPilot startup guide, I’m trying to enable the feature “CoPilot Security Group Management” from the Controller, but I got the following error:Add rule for [] failed:How can I enable this feature? Controller version: UserConnect-7.1.1710CoPilot version: v3.13.0 | Appliance v3Both Controller and CoPilot are deployed in the same Azure VNET, in different subnets

924
Bigo
Bigo
BigoSecond Officer
Asked in General
Copilot AirSpace Topology not showing all gateways

I created a basic infrstructure in Azure with terraform, consisting of 2 spoke gateways and 1 transit gateway.VNETs, Gateways and peerings are created correctly.  However, on the AirSpace Topology view, I can see the subnet and the controller object only for VNET1 and not for VNET2 and Transit VNET.What could be wrong? 

552
Bigo
Joe
JoeAviatrix Employee
posted in Self Service Launch Tool
Aviatrix Self Service Launch Tool (SSLT): Walkthrough Guide

1. SSLT: IntroductionThe Aviatrix Self Service Launch Tool (SSLT) is the new community-supported tool that orchestrates the deployment of a multicloud infrastructure securing the cloud networking with the Aviatrix platform. The tool provides several interesting use cases that reflect world case scenarios. 2. Accessing SSLTLaunch the Aviatrix Self Service Launch Tool and click on the “Sign Up / Sign In with LinkedIn” button. Insert your LinkedIn credentials and then click on the “Sign in” button. Then you need to click on “Allow”. 3. SSLT PortalThe SSLT Portal provides two types of automated deployments:Distributed Cloud Firewall for Egress Aviatrix Secure Cloud Networking (Controller/CoPilot)     3.1. Distributed Cloud Firewall for EgressLet’s start exploring the first option (i.e. Distributed Cloud Firewall for Egress).Click on the “Begin Exploring” button.  3.1.1. Step 1 - Prerequisities: How to generate the License KeyFirst and foremost, click on the link “Aviatrix Secure Networking

4180
Joe
Bigo
BigoSecond Officer
Asked in General
Resource Creation failed from CoPilot

I tried creating both an Azure VNET an Aviatrix gateway from CoPilot, but they both failed with the following error:[AVXERR-RBAC-0024] User does not have access to account MY_AZURE_SUBSCRIPTION to perform the current action  Note that both actions succeded if performed from the controller.The servce account I’m using for copilot is named SVC_CoPilot_usr, is part of the SVC_CoPilot permission group, which has “all_write” permissions.

1172
Bigo
V
vivas
Asked in General
How to limit topology replay to the last 3 months

Our topology replay keeps data from Dec 2022 until today. Actually, we are not interested in keeping data that far; and sincerely, it is a little bit of a nuisance during emergency because if something happens today, you end up spending time zooming in.Any idea how to prune this data? I reduced Topology Replay disk utilization to 2k records and I did not see any difference. Thanks, A 

302
V
N
Neven1986Cadet
Asked in General
Rest API 7.0 or 7.1

Hello Community,were one can find the documentation and/or Postman collection for Controller RestAPI v7.0/v7.1?Thank you in advance

840
N
H
halldaniela201Cadet
Asked in General
Seeking Recommendations for Optimizing Intel Graphics Performance on Aviatrix Community

Hello Everyone,I'm reaching out to seek your expertise and insights on optimizing Intel Arc GPU performance within the Aviatrix ecosystem. As I recently acquired an Intel Arc GPU, I'm keen to make the most out of its capabilities while working with Aviatrix software. Are there any specific settings, drivers, or optimization techniques that you have found to be effective in maximizing performance and improving the visual experience when using Aviatrix with Intel Arc GPUs?I highly value your experiences and would greatly appreciate any personal tips, tricks, or best practices you can share specifically related to Intel Arc GPUs and their integration within the Aviatrix environment. Additionally, if there are any community-specific discussions or resources related to optimizing Intel Arc GPU within the Aviatrix ecosystem, I would love to explore them.Thank you all in advance for your valuable insights and assistance! 

660
H
R
Rodman_StuhlmullerCadet
posted in Self Service Launch Tool
How do I update the SelfService CloudFormation template in AWS?

To update the selfservice cloudformation template with the most recent changes, first navigate to Cloudformation in your AWS account. Next, select the region you are trying to update by selecting your region in the top-right of the site. Once you have done so, find the AviatrixSelfServiceDeploy stack, select it, and click “Update”. Then choose “Replace current template” → “Amazon S3 URL” and then enter this url: https://aviatrix-s3-public.s3.amazonaws.com/SelfService/cfn.ymlFinally, just click “Next” through the screens until the cloudformation starts the update.

320
R
J
John_GonsalvesAviatrix Employee
published in Security
Securing Cloud Networks: Strategies and Insights from a CTO

As a former Head of Network Engineering at a global financial, I have witnessed the transformative power of cloud networks. The ability to scale resources dynamically, enhance collaboration, and increase operational efficiency has made cloud networks a cornerstone of modern business infrastructure.  We’re now moving into another exciting era of cloud networking whereby the security and cost control of cloud networks is paramount - given the sensitive data and critical applications moving to cloud, and the need to lower cloud cost and spend more strategically. Balancing these factors is key to maximize the benefits of the cloud while minimizing risks and maintaining financial sustainability. In this blog, I will delve into the mindset of a CIO/CTO and explore strategies to ensure a secure cloud network and cost control measures. Whilst some of the strategies mentioned below may seem obvious, the innovative and disruptive solutions from companies like Aviatrix may not feel so to everyone

1190
J
Shahzad Ali
Shahzad AliCommander
posted in Self Service Launch Tool
Aviatrix Self Service Launch Tool FAQ

Aviatrix Self Service Launch Tool FAQ1. What is the Aviatrix Self Service Launch Tool? The Aviatrix Self Service Launch Tool is a community-supported tool that enables users to deploy secure cloud networking use cases in minutes. It simplifies and automates the process of setting up secure cloud networks in popular cloud service providers like AWS, Azure, and others.2. How does the Aviatrix Self Service Launch Tool work? The tool provides a user-friendly interface where users can select the desired cloud networking use case and configure the necessary parameters. Once the configuration is complete, the tool provisions the required infrastructure and deploys the networking components automatically, saving time and effort.3. Is there a cost associated with using the Aviatrix Self Service Launch Tool? No, there is no cost for using the Aviatrix Self Service Launch Tool itself. However, please note that users are responsible for paying the license cost of the Aviatrix software and any appl

930
Shahzad Ali
John_Smoker
John_SmokerAviatrix Employee
posted in Self Service Launch Tool
Aviatrix Self Service Launch Tool (SSLT): AWS: Manual clean up for the "Secure Egress" use-case infrastructure

The SSLT Secure Egress use-case deploys a number of components to your AWS account in the region you specified. This includes:EC2 instances, keypairs, security groups, volumes An NLB and target group VPCs, subnets, route tables, nat gateway, etc EIPs and network interfaces An S3 bucket and contents IAM roles and policies KMS keysYou can see a listing of many of these items by searching with the AWS tag editor for ‘Owner:Aviatrix-SelfService’AWS Tag Editor Sample Link To clean up the infrastructure in your account, complete the items in the following order:Remove ‘termination protection’ from the EC2 instances ‘AviatrixController’ and ‘aviatrix-avx-ec2-spoke-selfservice’ Terminate all instances Delete the NLB ‘AVX-SelfService-EC2-NLB-Egress’ Delete the Target Group ‘AVX-SelfService-EC2-TG-Egress’ Delete all Keypairs with ‘selfservice’ in the name Delete the nat gateway aviatrix-selfservice-vpc-secure-egress-us-east-2a Delete the controller and copilot network interfaces Release Elastic

690
John_Smoker
Katie Holms
Katie HolmsAviatrix Employee
posted in General
Career Advice: Don’t Forget to Channel Your Soft Skills (Reddit)

Great conversation on Reddit this week. Some great tips and reminders for seasoned or beginners. Worth a read! Check the Reddit out thread here and share your views below. 

280
Katie Holms
A
Anonymous
posted in General
What books have you been reading to stay on top of your game?!

Hey All, I have always been a very avid reader, Some books that have been very influential in my life have been books like “Who moved my Cheese” by Spencer Johnson and “How to win friends and influence people” by Dale Carnegie Here are some recent books I have added to my collection and they all have been really insightful Zero to One - Peter ThielAmp it up - Frank SlootmanThe Qualified Sales Leader - John McMahon5 Why’s - Majed RajehEscaping the Build Trap - Melissa PerriThe Alchemy of Growth - David A White, Mehrdad Baghai and Stephen ColeyThe Hybrid cloud Handbook for AWS - Tim McConnaughy I’ve just started “Cloud Auditing Best Practices” by Shinesa Cambridge and Michael Ratemo and it is pretty darn good! Please share some of the books you’ve been reading!  

733
Alex_Weiss

Recently Awarded Badges

  • Aviatrix Certified Engineer
    Ageorgehas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    pakbayu08has earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    Yogesh_Kadamhas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    Trentoneppshas earned the badge Aviatrix Certified Engineer
  • Aviatrix Certified Engineer
    Pranshulhas earned the badge Aviatrix Certified Engineer
Show all badges
Terms & Conditions