{"id":48588,"date":"2017-12-12T14:48:15","date_gmt":"2017-12-12T14:48:15","guid":{"rendered":"https:\/\/www.whizlabs.com\/?p=48588"},"modified":"2020-08-31T18:10:36","modified_gmt":"2020-08-31T18:10:36","slug":"vpc-peering-basics","status":"publish","type":"post","link":"https:\/\/www.whizlabs.com\/blog\/vpc-peering-basics\/","title":{"rendered":"Basics of VPC Peering – Amazon Virtual Private Cloud"},"content":{"rendered":"

Exam Objective<\/b><\/p>\n

Virtual Private Cloud (VPC)<\/a> is a separate isolated region that is used to host AWS resources.\u00a0The topic “VPC Peering<\/strong>” addresses the Design and Implementation of AWS Networks as highlighted in the AWS Blueprint<\/a> for the exam guide.<\/p>\n

Start AWS Certified Advanced Networking Specialty Free Test<\/a> Now<\/p><\/blockquote>\n

What is VPC Peering?<\/h2>\n

VPC Peering is allowed for the connection of two VPC\u2019s such that the instances in the VPC can communicate with each other. The VPC\u2019s can be part of multiple accounts, ut must be in the same region.<\/p>\n

Let\u2019s go ahead and see how to work with VPC Peering.<\/p>\n

Implementation of VPC Peering<\/b><\/h4>\n

Let\u2019s follow the below steps to see how VPC Peering can be implemented.<\/p>\n

The first few steps will involve creating 2 VPC\u2019s first before peering them together.<\/p>\n

Step 1) Log into your AWS Console. Choose the relevant region and go to the VPC section under Networking and Content Delivery section.<\/p>\n

\"VPC<\/a><\/p>\n

Step 2) Create one VPC with a name tag of VPCA and CIDR block of 10.0.0.0\/16<\/p>\n

\"Create<\/a><\/p>\n

Step 3) Create another VPC with a name tag of VPCB and CIDR block of 20.0.0.0\/16<\/p>\n

\"CIDR<\/a><\/p>\n

Step 4) Now let\u2019s create subnets in each of these VPC\u2019s. In VPCA let\u2019s create a subnet with a Name tag of SubnetA with a CIDR block of 20.0.1.0\/24<\/p>\n

\"Amazon<\/a><\/p>\n

Step 5) Nowlet\u2019s create a subnet in VPCB. In VPCA let\u2019s create a subnet with a Name tag of SubnetB with a CIDR block of 10.0.1.0\/24<\/p>\n

\"Virtual<\/a><\/p>\n

\n

Also Read<\/strong>: How to Improve Connectivity and Secure your VPC Resources<\/a>?<\/p>\n<\/blockquote>\n

Step 6) Now we are going to launch instances in both of the subnets. We want to ensure that both subnets get Public IP addresses, so enable them for the each subnet accordingly.<\/p>\n

\"Amazon<\/a><\/p>\n

Ensure the Auto-assign IP settings is enabled for both subnets<\/p>\n

\"VPC<\/a><\/p>\n

Step 7) Now let\u2019s create a VPC Peering connection between both of the VPC\u2019s<\/p>\n

On the left hand side, go to Peering connections<\/p>\n

\"VPC<\/a><\/p>\n

Step 8)In the next screen go ahead and click on Creating a new peering connection.<\/p>\n

For the peering connection, give a name tag for the connection. And then put the requester of the VPC as VPCA<\/p>\n

\"Create<\/a><\/p>\n

Then choose the other VPC as the VPC to Peer with and then click on Create Peering connection.<\/p>\n

\"Create<\/a><\/p>\n

Step 9) Now the VPC Peering connection you can see that the Status is Pending Acceptance<\/p>\n

\"VPC<\/a><\/p>\n

Choose the connection, click on Actions->Accept Request<\/p>\n

\"VPC<\/a><\/p>\n

And then accept the request<\/p>\n

\"VPC<\/a><\/p>\n

Once done, the connection will be in the Active State<\/p>\n

Step 10) Now we need to modify the route tables of both the VPC\u2019s to ensure that communication can flow via the VPC Peering connection.<\/p>\n

So in the Route Table for VPC B, we need to add the destination for the CIDR of VPC A as the destination and the VPC Peering connection as the target.<\/p>\n

\"VPC<\/a><\/p>\n

We need to do the same thing for the Route table of VPC A<\/p>\n

\"VPC<\/a><\/p>\n

If you want to connect to anyone of the instances in the VPC via the internet, ensure that the internet gateway is attached to the Route table as well.<\/p>\n

\"VPC<\/a><\/p>\n

Step 11) Now it\u2019s time to launch instances in each VPC.<\/p>\n

So here we have 2 servers, one is ServerA which is launched in VPCA and ServerB launched in VPCB<\/p>\n

\"VPC<\/a><\/p>\n

Now we are going to connect to ServerA in VPCA and then ping ServerB. The private IP of ServerB is 10.0.1.138.<\/p>\n

\"Amazon<\/a><\/p>\n

Since we are going to use the ping command , ensure that the Security Group for both instances have the security group modified to allow the ICMP protocol.<\/p>\n

\"VPC<\/a><\/p>\n

Once all of this is in place, you will be able to ping ServerB from ServerA.<\/p>\n

\"Amazon<\/a><\/p>\n

Also Read:<\/strong>\u00a0Introduction to Elastic Network Interface<\/a><\/em><\/p><\/blockquote>\n

Important Points to Remember<\/b><\/h4>\n