VMware Cloud on AWS VPN BGP Route filtering

Gilles Chekroun
Lead VMware Cloud on AWS Solutions Architect --- Building a Route Based VPN with VMware Cloud on AWS is simple. There are multiple descriptions in this blog using APIs here and PowerCLI here . Today I want to highlight a very common request to filter BGP routes incoming and/or outgoing on a Route Based VPN tunnel. To do that, I will simply use an AWS Transit Gateway as the other end of the VPN tunnel. Initial Setup SDDC Side On the SDDC side I have a few Networks: Management at 10.10.0.0/23 NSX Segments 11.11.11.0/24 12.12.12.0/24 13.13.13.0/24 192.168.1.0/24 TGW Side On the TGW side I just added 2 static routes that will be propagated to the SDDC 22.22.0.0/24 33.33.0.0/24 SDDC Routes Visibility Note that when