简体   繁体   English

如何在没有 VPN 的情况下设置 VPC 到 VPC 的连接?

[英]How to setup VPC to VPC connection without VPN?

I am looking to find a way to communicate between 2 VPCs in AWS without the use of VPN connections to and from a certain company (outside AWS) - so that the traffic does not pass through the company's gateway.我正在寻找一种方法来在 AWS 中的 2 个 VPC 之间进行通信,而无需使用与某个公司(AWS 外部)之间的 VPN 连接——这样流量就不会通过公司的网关。 Or, simply said, access an EC2 instance in a VPC from another VPC (both in AWS) without leaving the Amazon Network (not going out on the internet, not even encrypted).或者,简单地说,从另一个 VPC(均在 AWS 中)访问 VPC 中的 EC2 实例,而无需离开 Amazon 网络(不上网,甚至未加密)。

Basically what I want to do is to have a VPC acting as a "proxy" (let's call it PROX) and one acting as a "target" (called TARG).基本上我想要做的是让一个 VPC 充当“代理”(我们称之为 PROX)和一个充当“目标”(称为 TARG)。 Now I want to connect a company through VPC to the PROX and inside the PROX route the requests to the TARG.现在我想通过 VPC 将公司连接到 PROX,并在 PROX 内部将请求路由到 TARG。 Is this achievable?这是可以实现的吗? I would go for a traditional public-private single VPC, but I was asked to look into the previously described "architecture".我会选择传统的公私单一 VPC,但我被要求研究之前描述的“架构”。

Use two Linux machines as VPN GW, each in each VPC.使用两台 Linux 机器作为 VPN GW,每台机器在每个 VPC 中。 Configure IPsec VPN between them.在它们之间配置 IPsec VPN。

That's all you need这就是你所需要的

This is not possible.这不可能。 You have to use a VPN connection between the two VPCs.您必须在两个 VPC 之间使用 VPN 连接。 You can directly connect them though relatively easily using the pair of IPSec gateways though.不过,您可以使用一对 IPSec 网关相对容易地直接连接它们。 This is the recommended method of cross-connecting VPC's across regions.这是跨区域交叉连接 VPC 的推荐方法。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM