Questions tagged [aws]
Use this tag for any questions related to Amazon Web Services (as long as those questions are in scope of SE.NetworkEngineering)
27 questions
1 vote
2 answers
115 views
How does a packet respond to a request from NLB that has a ALB target group to a node with client IP preservation on?
Traffic Flow for Incoming Requests: The client sends a request to NLB. The NLB forwards the request to the Application Load Balancer (ALB) with client IP preservation enabled. The ALB receives the ...
- 13
2 votes
1 answer
388 views
Dropped egress traffic in gwlb/palo alto aws scenario. IGW_REJECTS_SPOOFED_TRAFFIC error
hello everyone, I can't understand the behavior of outbound traffic in the figure. For simplicity I have shown only the elements for the traffic to the internet generated by the ec2 in the public-...
- 21
0 votes
1 answer
280 views
Why does EKS Fargate require NAT?
EKS Fargate is an AWS service for "serverless" hosting of some pods in a Kubernetes cluster. The docs mention that NAT is obligatory, why is this? I tried using traceroute from a Fargate pod....
- 103
0 votes
1 answer
179 views
Is internal network traffic sent to private subnets via their NAT Server?
Similar to this question, I'm wondering how resources in my public subnets communicate with those in my private subnets - when there is a NAT service present. My impression is that a self-managed NAT ...
- 103
0 votes
1 answer
395 views
How to configure IDr on Cisco ASA for AWS IPsec tunnels
I am currently facing an issue while attempting to establish IPsec tunnels between AWS and a Cisco ASA firewall. The AWS tunnel logs indicate that the Identity Resolution checks are failing, ...
0 votes
2 answers
251 views
Is there a plausible way to detect an IP address as being hosted on AWS using BYO-IP?
AWS publishes ip-ranges.json, and when a client connects to my system I can search the JSON file to determine if the client is coming from AWS or not. If I don't need to know the AWS region, I could ...
- 103
1 vote
0 answers
71 views
VPN conflicts from using 2 VPNs [closed]
My QA has a problem. They need to test the app, and the database at the same time. To access our app (testing environment), they need to connect to the company VPN through GlobalProtect, and then they ...
- 11
1 vote
1 answer
430 views
Inherent flaw in stateless firewalls?
I am but a lowly (software) developer dabbling with setting up a network in AWS and am having trouble understanding the fundamentals of stateless firewalls, or Network ACLs as they're also referred to ...
- 13
3 votes
1 answer
391 views
Juniper SRX Cluster and Switching with AWS Direct Connect
We have a setup of two SRXs (345) in cluster mode that connect to AWS Direct Connect, each SRX connects to one AWS Connection on a local interface. The SRX also functions as a switch for two Kemp Load ...
- 143
1 vote
1 answer
271 views
Cisco SD-WAN Cloud OnRamp Configuration
I'm configuring a user per the instructions https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/cloudonramp/ios-xe-17/cloud-onramp-book-xe/cloud-onramp-multi-cloud.html#...
- 111
1 vote
2 answers
101 views
Can I assign one of my publicly available IP address to my AWS instance? [closed]
I would like to be able to use one of my publicly accessible ip addresses directly with my aws cloud instance. Is there a way I can assign or transfer one of my ip address to aws? My ARIN registry ...
- 13
2 votes
0 answers
1k views
How to redistribute BGP routes learned from AWS in one VR into another BGP running in another VR in Palo Alto firewall?
I have about 1000+ prefixes I am learning from AWS on Palo Alto through a BGP. This is on the secondary VR. Main VR is where my core routing is situated along with another BGP instance pointing to ...
- 136
0 votes
0 answers
315 views
Unable to get NetFlow flow in Cisco CSR1000v on AWS
I'm trying to use NetFlow Traffic Analyzer of SolarWinds or any NetFlow Monitor in my Cisco CSR1000v routers which are deployed on AWS. I am unable to see any NetFlow flows in the NetFlow Traffic ...
- 145
1 vote
1 answer
201 views
AWS connectivity UDP works but TCP times out
I have some issues here I have built an L2l VPN from my location to AWS London, I can see that the tunnel is up but when I attempt to connect our local domain controller here in our office to AWS ...
- 83
3 votes
1 answer
166 views
L2L ACL issue with Cisco ASA to AWS Cloud
Need help seeing what I am not seeing at the moment. I have built a l2l to the AWS cloud I run a packet trace outbound and that passes but when I run packet tracer outbound in I keep getting denied ...
- 83