VMware Cloud On AWS Networking Reference Architecture.pdf

AWS Direct Connect establishes connectivity from on-premises networks to VMware Software-defined Data Centers (SDDCs) in AWS Regions. A private virtual interface (VIF) provides connectivity to SDDC A in Region A, while an AWS Site-to-Site VPN over the internet serves as a backup. A public VIF enables access to AWS public services. In Region B, a site-to-site VPN is used due to the lack of a Direct Connect connection. The Direct Connect gateway (DXGW) associates with virtual private gateways (VGWs) to enable on-premises communication with Amazon VPCs in multiple Regions. Site-to-Site VPNs are configured as a backup to DXGW-VGW associations for more resilient connectivity.

AWS Transit Gateway provides on-premises connectivity to Amazon VPCs, with attachments for VPCs, VPNs, DXGW, and peering. Transit Gateway peering attachments enable cross-Region communication between networks connected to Transit Gateways. VMware Transit Connect (vTGW) provides high-bandwidth, low-latency connectivity between SDDCs, attached VPCs, and on-premises networks via DXGW. VPC attachments to vTGW enable communication with SDDC networks connected to the same vTGW. Cross-Region vTGW peering and AWS Transit Gateway peering attachments enable communication between SDDC networks and networks connected to TGWs.