Understanding VMware Cloud on AWS Account Structure and Data Charges

-
Gilles Chekroun
Lead NSX Systems Engineer - VMware Europe
---

With the success of VMware Cloud on AWS service, I often get asked by my Customers about the AWS Accounts Structure and Data Charges.
It is important to understand who owns what and how AWS charges will be seen.

Accounts Structure

The VMware Cloud SDDC account:

This owned by VMware and the Customer SDDC will be deployed in that VPC. The cluster(s) nodes are EC2 bare-metal instances deployed in that VPC and belong to VMware.
This is paid to AWS by VMware directly but this is dedicated to the Customer.
VMware has a different account per customer and the resources deployed are not shared.
The Egress charges are also negotiated and a bit lower than regular egress charges.

The AWS Customer Account:

This is owned by the Customer and will be linked to the VMware account.
AWS resources in that account are paid directly by the Customer to AWS.
There is a private connection to the VMware Cloud SDDC on the Networking side at 25Gbps to give Virtual Machines in VMware Cloud access to native resources in AWS like S3, EC2, RDS etc.

Description






 Note: 
- The ENI connection traffic is free in the same AWS Region - same Availability Zone.
- Since Jan 19, 2021, the cross AZs charges are now totally removed.
 - For S3 storage, Data out to S3 is free and Data in from S3 in the same region is also free.
Refer to S3 Data Charges. Having said that, The AWS S3 service itself is not free.
- Egress internet out $0.09/GB is for US and Europe (up to 10TB/month) see https://aws.amazon.com/ec2/pricing/on-demand/
Other regions are different. for example:
India          $0.1093/GB
Seoul          $0.126/GB
Sydney/Tokyo   $0.114/GB
Brazil         $0.250/GB
Gov Cloud      $0.155/GB

For reference, find AWS link to Data Transfer prices


Data Transfer IN : To Amazon EC2 From ...
Internet free
Another AWS Region (from any AWS Service) free
Amazon S3, Amazon Glacier, Amazon DynamoDB, Amazon SES, Amazon SQS, or Amazon SimpleDB in the same AWS Region free
Amazon EC2, Amazon RDS, Amazon Redshift and Amazon ElastiCache instances or Elastic Network Interfaces in the same Availability Zone using…
    Using a private IPv4 address  free
    Using a public or Elastic IPv4 address  $0.010 per GB
    Using an IPv6 address within the same VPC  free
    Using an IPv6 address from a different VPC   $0.010 per GB
Amazon EC2, Amazon RDS, Amazon Redshift and Amazon ElastiCache instances or Elastic Network Interfaces in  another Availability Zone or peered VPC in the same AWS Region $0.010 per GB


Data Transfer OUT : From Amazon EC2 To …
Amazon S3, Amazon Glacier, Amazon DynamoDB, Amazon SES, Amazon SQS, or Amazon SimpleDB in the same AWS Region free
Amazon EC2, Amazon RDS, Amazon Redshift or Amazon ElastiCache instances, Amazon Elastic Load Balancing, or  Elastic Network Interfaces in the same Availability Zone using …
    Using a private IPv4 address  free
    Using a public or Elastic IPv4 address  $0.010 per GB
    Using an IPv6 address within the same VPC  free
    Using an IPv6 address from a different VPC   $0.010 per GB
Amazon EC2, Amazon RDS, Amazon Redshift or Amazon ElastiCache instances, Amazon Elastic Load Balancing, or Elastic Network Interfaces in another Availability Zone or peered VPC in the same AWS Region $0.010 per GB in each direction
Another AWS Region $0.020 per GB
Amazon CloudFront free


Data Transfer OUT From Amazon EC2 To Internet
First 1 GB / month free
Up to 10 TB / month $0.090 per GB
Next 40 TB / month $0.085 per GB
Next 100 TB / month $0.070 per GB
Next 350 TB / month $0.050 per GB
Elastic IP Address
One Elastic IP address associated with a running instance free
Additional Elastic IP address associated with a running instance per hour $0.005 / IP / hour 
Elastic IP address not associated with a running instance per hour  $0.005 / IP / hour 
Elastic IP address remap  $0.10 / IP 


For reference, find AWS link to Direct Connect prices


Direct Connect
Port Speed All regions but Japan
50M* $0.03/hour
100M* $0.06/hour
200M* $0.12/hour
300M* $0.18/hour
400M* $0.24/hour
500M* $0.30/hour
1G $0.30/hour
10G $2.25/hour
Data transfer IN free
Data transfer OUT from London, Frankfurt, Paris, Dublin to any DX location but South Africa $0.020 per GB
To Cape town, Jo'burg $0.110 per GB

Direct Connect Locations in Europe


Direct Connect: European Connections
Interxion VIE2, Vienna AU
Interxion ZUR1, Zurich CH
CE Colo, Prague CZ
Equinix FR5, Frankfurt DE
Interxion FRA6, Frankfurt DE
Equinix MU1, Munich DE
IPB, Berlin DE
Eircom Clonshaugh, Dublin EI
Interxion DUB2, Dublin EI
Equinix HE6, Helsinki FI
Equinix PA3, Paris FR
Telehouse Voltaire, Paris FR
Interxion MRS1, Marseille FR
Equinix AM3, Amsterdam NL
Equinix WA1, Warsaw PL
Teraco CT1, Cape Town SA
Teraco JB1, Johannesburg SA
Interxion MAD2, Madrid SP
Equinix ITConic MD 2, Madrid SP
Interxion STO1, Stockholm SW
Equinix LD5, Slough UK
Equinix MA3, Manchester UK
Digital Realty (UK), Docklands, London UK
Telehouse West, London UK


Ed Schmookler and Robert Riemer have published a great blog post to show how to use VMware "Network Insight" to analyse the Data traffic and estimate the costs.
Calculate AWS Egress Fees Proactively for VMware Cloud on AWS





Comments

  1. Hevo Data IncSeptember 13, 2019 at 7:41 PM

    Excellent post. I always check this type of blog, and I’m impressed with Extremely useful info, I care for such information a lot. I am exploring this particular info for a long time. Thanks to this blog my exploration has ended. snowflake vs redshift

    ReplyDelete
  2. Haneef AliOctober 17, 2021 at 7:12 PM

    In consumer VPC, across AZ shouldn't it be free now?

    ReplyDelete
    Replies
    1. Gilles ChekrounOctober 17, 2021 at 8:04 PM

      Not in the attached VPC. The free cross AZ is in the SDDC side when using stretched cluster only

      Delete

Post a Comment

Populars

Egress VPC and AWS Transit Gateway (Part1)

-
Image
Gilles Chekroun
 Lead VMware Cloud on AWS Solutions Architect --- Usually my blog posts are customer driven and recently I have been working on a design that would include an Egress VPC and AWS Transit Gateway. This customer is going to use both VMware Managed Transit Gateway and also AWS Transit Gateway. I will split this post in 3 parts: The Egress VPC - this article Adding a VMC SDDC to the Egress VPC here Adding VMware Managed Transit Gateway here Why do we need an Egress VPC? Numerous posts on AWS site  will describe how to build an Egress VPC and the subtleties of the various route tables of the TGW and the Egress VPC itself. The main goal is to have ONE Internet gateway only  that will allow workloads to go out to internet on the Egress VPC. One of the most important point is redundancy and multi-availability zones. Applications usually reside in private subnets, while NAT Gateways reside in a public subnet. NAT Gateways To focus the Internet access to a single point, we can cre
Read more

AWS Transitive routing with Transit Gateways in the same region

-
Image
Gilles Chekroun Lead VMware Cloud on AWS Specialist --- At the AWS Re:invent 2019 conference, the long waited TGW peering functionality was announced and available in a few AWS regions. This is an INTER-REGION peering only meaning that the Transit Gateways need to be in different regions. Hoping that AWS will soon release an INTRA-REGION capability I discussed with a few AWS Solutions Architects in Las Vegas, among them Tom Adamski , about using a VPC as a bridge between two TGWs in the same region. Tom assured me that it is possible opening for the first time the transitive routing capability in AWS networking. Well . . . I needed to test that and see by myself. Test bed For a simple test, I will use 2 TGWs in the same regions with 2 VPCs attached each and another VPC as "bridge" connected to both TGWs. Yes you can connect a VPC up to 5 TGWs . The whole idea is to use this "bridging VPC" and point the default route of the TGWs to it. To do that I c
Read more

Costs analysis for Data Transfer via VMware Managed TGW

-
Image
Gilles Chekroun
 Lead VMware Cloud on AWS Solutions Architect --- Every customer design is different but all of them should include a costs analysis specifically when using VMware managed Transit Gateway or AWS Transit Gateway. The AWS page here has very useful information for us to be able to understand costs. Transit Gateway Costs TGW pricing is split in 2 components: A fixed price for infrastructure connectivity per hour. Depending on the attachments, various account owners are charged.  A variable price for processing data via the TGW. Price is per GB. The sending account is charged. Prices depend on regions and range from $0.05 to $0.09 per attachment per hour. Who is charged? See AWS page VPC attachments The VPC account owner is charged and is billed hourly. VPN attachments The TGW account owner is billed hourly. Site-to-Site VPN connection pricing still applies in addition to the VPN TGW attachments. Direct Connect Gateway attachments The DXGW account owner is billed hourly.
Read more