Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The process for creating a cucloud.net Hosted Zone in your AWS account and requesting DNS delegation can be found in Route 53 Subdomain Delegation.

How can confirm that a peering connection is being used for 10-space traffic instead of the Direct Connect.

Suppose I have two AWS VPCs that are both connected to campus networks with Direct Connect. How can I tell if traffic between those two VPCs are using an AWS peering connection or traveling the Direct Connect and making a u-turn on-campus? The answer is to look at the results of traceroute between two IPs, one in each VPC.

Here is the traffic pattern traceroute would return when Direct Connect is being used

Code Block
titletraceroute results with Direct Connect show on-campus nodes involved in the Direct Connect
> traceroute 10.92.131.194
traceroute to 10.92.131.194 (10.92.131.194), 30 hops max, 60 byte packets
 1  * * *
 2  aws1-mx-vl3302.net.cornell.edu (10.22.223.4)  10.856 ms  10.799 ms  10.741 ms
 3  aws-bgp-vl3334.net.cornell.edu (10.22.223.85)  10.722 ms  10.676 ms  10.629 ms
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *

Here is the traffic pattern traceroute would return when AWS traffic is traversing peered VPCs:

Code Block
titletraceroute shows just a single hop when traffic uses a peering connection
> traceroute 10.92.168.117
traceroute to 10.92.168.117 (10.92.168.117), 30 hops max, 60 byte packets
 1  10.92.168.117 (10.92.168.117)  5.174 ms  5.201 ms  3.095 ms

Working with Data

When should I use Direct Connect and when should I use the public internet to transfer data?

...