VMC on AWS + Direct Connect + VPN

Hey! Sometimes we face difficulties to implement connectivity between an on-premise environment and an SDDC VMware Cloud on AWS.

The AWS reference architecture shows many options for connecting on-prem to NSX Gateway SDDCs (Tier 0 router): Site-to-Site VPC VPN, AWS Direct Connect, and AWS Direct Connect Gateway (DXGW).

However, the lack of a Direct Connect instance i­n a region (for cost restrictions or offer unavailability) creates a design constraint. To address it, we can combine the VPC VPN with the  Direct Connect hosted in another region.

This solution combines the benefits of the end-to-end secure IPSec connection with low latency and increased bandwidth of the AWS Direct Connect to provide a more consistent network experience than internet-based VPN connections

To access the full picture (page 1): VMware Cloud on AWS – Networking Reference Architecture

AWS Reference: AWS Direct Connect + VPN