AWS CLouD NeTWoRkiNg SuiTE 3000
GitHub - JudeQuintana/terraform-main: AwS CLouD NeTWoRkiNg SuiTE 3000
     ____.             ________        ________
    |    |____  ___.__.\_____  \       \_____  \   ____   ____
    |    \__  \<   |  | /  / \  \       /   |   \ /    \_/ __ \
/\__|    |/ __ \\___  |/   \_/.  \     /    |    \   |  \  ___/
\________(____  / ____|\_____\ \_/_____\_______  /___|  /\___  >
              \/\/            \__>_____/       \/     \/     \/

--=[ PrEsENtZ ]=--

--=[ AwS CLouD NeTWoRkiNg SuiTE 3000 ]=--

--=[ #StayUp ]=--

NEW Dual Stack Full Mesh Trio!
Dual Stack Full Mesh Trio Demo

Compose a dual stack Full Mesh Transit Gateway across 3 regions using Tiered VPC-NG (at v1.0.3), Centralized Router (at v1.0.3)  and Full Mesh Trio (at v1.0.1) modules
Includes an VPC peering examples within a full mesh configuration used high traffic workloads to save on cost for inter-region using the VPC Peering Deluxe module (at v1.0.1).
Requires IPAM Pools for IPv4 and IPv6 cidrs.
Validate connectivity with Route Anlyzer.

Dual Stack TNT Architecture!
Dual Stack Terraform Networking Trifecta Demo

Compose a dual stack hub and spoke Transit Gateway using Tiered VPC-NG (at v1.0.3) and Centralized Router (at v1.0.3) modules.
Requires IPAM Pools for IPv4 and IPv6 cidrs.
Validate connectivity with EC2 instances.

TNT Architecture!
Terraform Networking Trifecta Demo

Compose a hub and spoke Transit Gateway using Tiered VPC-NG (at v1.0.1) and Centralized Router (at v1.0.1) modules.
IPv4 only (no IPAM).
Validate connectivity with EC2 instances.

Super Router!
Super Router Demo

Compose a decentralized hub and spoke Transit Gateway using Tiered VPC-NG (at v1.0.1), Centralized Router (at v1.0.1), and Super Router (at v1.0.0) modules.
IPv4 only (no IPAM).
Validate connectivity with AWS Route Analyzer.

Full Mesh Trio!
Full Mesh Trio Demo

Compose a Full Mesh Transit Gateway across 3 regions using Tiered VPC-NG (at v1.0.1), Centralized Router (at v1.0.1) and Full Mesh Trio (at v1.0.0) modules.
Includes an VPC peering examples within a full mesh configuration for high traffic workloads to save on cost for intra-region using the VPC Peering Deluxe module (at v1.0.0).
IPv4 only (no IPAM).
Validate connectivity with AWS Route Analyzer.

Mega Mesh!
Mega Mesh Demo

Compose a Full Mesh Transit Gateway across 10 regions using Tiered VPC-NG (at v1.0.1), Centralized Router (at v1.0.1) and Mega Mesh (at v1.0.0) modules.
IPv4 only (no IPAM).
Validate connectivity with AWS Route Analyzer.


Notes

Sometimes I'll blog about ideas at jq1.io.
All modules are first developed in the terraform-modules repo.
The most useful modules are published to the Public Terraform Registry.
All demos include an example of generating security group rules for inter-region and cross-region VPCs for each TGW configuration.

Intra VPC Security Group Rule (IPv4 only)
Super Intra VPC Security Group Rules (IPv4 only)
Full Mesh Intra VPC Security Group Rules (IPv4 only)
IPv6 Intra VPC Security Group Rule (IPv6 only, for use with dual stack VPCs)
New IPv6 Full Mesh Intra VPC Security Group Rules (IPv6 only, for use with dual stack VPCs)
TODO: Mega Mesh Intra VPC Security Group Rules


The Centralized Router module is an implementation of the AWS Centralized Router concept but without VPN Gateway or Direct Connect, only VPCs.
Available AZs (a,b,c etc) in a region are different per AWS account (ie. your us-west-2a is not the same AZ as my us-west-2a)
so it's possible you'll need to change the AZ letter for a VPC if the provider is saying it's not available for the region.
There is no overlapping CIDR detection inter-region or cross-region so it's important that the VPC's network and subnet CIDRs are allocated correctly.
Visual inspiration to spice up the concept:

https://twitter.com/MAKIO135/status/1378469836305666055
https://twitter.com/MAKIO135/status/1380634991818911746
https://twitter.com/MAKIO135/status/1379931304863657984
https://twitter.com/MAKIO135/status/1404543066724253699
https://twitter.com/MAKIO135/status/1368340867803660289



