Posts

Considerations on vTGW to TGW Peering Link

Image
   Gilles Chekroun
 Lead VMware Cloud on AWS Solutions Architect --- Recently I was talking with a Customer on designing their VMware Cloud on AWS environment and linking it to their existing AWS infrastructure. The idea was to have 2 SDDCs, Test and Prod, and link them with a VMware Managed TGW and peer it to their existing TGW. The customer requirements were: VMs in each SDDC should have internet access from the SDDC out VMs from Test should be able to talk to VMs in Prod VMs in any SDDC should be able to access their own vCenter but also the other one Some VMs any SDDC should have a Public IP and NAT rule to be accessible from outside VMware traffic should stay within VMware SDDCs Other traffic, like on-prem, should go via the Customer TGW Test Setup Step1 - Create SDDC Group Create an SDDC Group and attach the 2 SDDCs Prod and Test Make sure the proper FireWall rules are open in each SDDC Compute GW. Step 2 - Attach the Customer TGW In the SDDC Groups, under External TGW TAB, add t

Using VMware Cloud on AWS and AWS FSx for NetApp ONTAP single AZ

Image
  Gilles Chekroun
 Lead VMware Cloud on AWS Solutions Architect --- With the release of FSx for NetApp ONTAP , Customers are looking to attach cloud storage to their VMware VMs like NFS mount or iSCSI access. The initial release of FSx for NetApp is a multi Availability Zones implementation and is presenting an external IP address that doesn't belong to the VPC CIDR it's deployed on. This created a challenge for SDDC VMs to access that IP over the ENI to the connected VPC. Recently, on April 13 - 2022, AWS and NetApp have released a single AZ version of FSx-N and that is becoming interesting since all FSx IP addresses are now within the VPC CIDR and then visible by the SDDC. Note: This setup is for guest VMs mounts only. It is not adding a VMware datastore  Test setup Create an Amazon FSx for NetApp ONTAP file system Open the AWS FSx console at https://console.aws.amazon.com/fsx/  and create a File System Select the File System Type Create a small FSx for NetApp using Single A

Peer VMware managed TGW to AWS TGW in multi-region and multi-accounts

Image
Gilles Chekroun
 Lead VMware Cloud on AWS Solutions Architect --- UPDATED with On-prem connectivity (21 Sept 2021) VMware Managed Transit Gateway (aka vTGW or VMware Transit Connect) has now the capability to peer with an AWS TGW in a different AWS region . This is a new capability that will be introduced in the VMC release 1.16 but already available from 1.12 and up latest updates. TGW peering This capability has been available for quite some time with AWS Networking. Today the routing between TGWs is static although AWS recommends to use different ASN in case BGP Dynamic routing will come later. "To route traffic between the transit gateways, add a static route to the transit gateway route table that points to the transit gateway peering attachment. We recommend using unique ASNs for the peered transit gateways to take advantage of future route propagation capabilities." The following post will describe a vTGW to a TGW in multi-region - multi accounts setup. Peering Link En