Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

PhaseStageTimeframeActivityImpact on Cornell AWS Account VPC Network
Preparation

Data CollectionNovember 2022
  • Gather information about Direct Connect resources and connected VPCs in Cornell AWS accounts
none
Resource TaggingDecember 2022
  • Add tags to existing resources in customer accounts to assist with targeting, identification, status, intended disposition
none
Resource Groups
  • Create Transit Gateway in CIT AWS account
  • Create Resource Groups for resources involved in the migration in customer accounts
none
Customer Input #1
  • Customer review and feedback
none
Migration

Transit Gateway AttachmentsJanuary 2023
  • Transit Gateway Attachments created in customer accounts
  • V2 Route Tables created in customer accounts
none
Customer Input #2
  • Cornell AWS account owner review and feedback
  • Route Table and/or TGW Attachments adjusted according to customer input
none
VPC Routing Updated
  • V2 Route Tables activated; V1 Route Tables deactivated
VPC-to-campus traffic will be routed through the v2 architecture
Campus Direct Connect Routes Updated
  • Campus-side routing updated to begin using the v2 architecture for campus-to-AWS traffic
campus-to-VPC traffic will be routed through the V2 architecture
CleanupCustomer Account CleanupJan/Feb 2023
  • VGWs and DC VIFs in customer accounts deleted
none
Campus Direct Connect Cleanup
  • Campus Direct Connect resources deleted or decommissioned
none

Timeline

  • We expect to complete all stages in the Preparation phase in December 2022.
  • We expect to complete all stages in the Migration phase in January 2023.
  • More specific dates for each stage are forthcoming.

FAQs

How do I tell if my AWS account will be affected by this change?

(error)

How will this change affect my AWS account costs?

(error)

Does this change affect VPC peering?

VPC peering is not affected by this change.

However, since the Transit Gateway in the v2 architecture is configured to fully interconnect attached VPCs, most if not all VPC peering could be removed. When VPC peering is removed, VPC-to-VPC traffic that formerly used a peering connection would use the Transit Gateway instead. All traffic would remain in AWS, and the traffic would take two (2) hops to reach the target VPC instead of the one (1) hop that the peering connections support.

(warning) There is one case where VPC peering would need to remain in place. When Security Groups in a VPC reference Security Groups in a peered VPC, that peering cannot be removed without adjusting the security group to use CIDR blocks instead of the referenced Security Group. TGW Attachments do not support this type of Security Group referencing.

Reducing the amount of peering amongst Cornell AWS VPCs will take place later and customers will be contacted separately about that. No peering changes are planned as part of the Direct Connect architecture migration.

When, specifically, will this migration occur?

  • We expect to complete all stages in the Preparation phase in December 2022.
  • We expect to complete all stages in the Migration phase in January 2023.
  • More specific dates for each stage are forthcoming.

What if I use Terraform or a similar tool to manage the network resources in my AWS account?

(error)

References

...