Amazon Web Services (AWS) Cloud Connect
AWS Cloud Connect enables you to establish an AWS Direct Connect circuit directly to the Wanscale Platform. This provides a private, high-bandwidth connection to your VPCs and other AWS resources, bypassing the public internet.
Provisioning Workflow
The diagram below outlines the lifecycle of creating and deploying AWS Cloud Connect:
flowchart LR
A(Retrieve AWS Account ID) --> B(Create AWS Cloud Connect in the portal) --> C(Connect to AWS) --> D(Accept Hosted Connection in AWS Console) --> E(Create Virtual Interface in AWS) --> F(Configure BGP sessions in the portal)
%% Custom style for nodes
style A fill:#34ebb1
style B fill:#34ebb1
style C fill:#34ebb1
style D fill:#34ebb1
style E fill:#34ebb1
style F fill:#34ebb1
Prerequisites
Step 1 - Retrieve your AWS Account ID
To provision a Direct Connect hosted connection, the Wanscale Platform requires your 12-digit AWS Account ID. You can find this in the AWS Management Console under your account settings.
Configuration Workflow
Step 2 - Create AWS Cloud Connect in the Wanscale portal
- Navigate to the Home page of the Wanscale Platform.
- Click the Add Service button.
- Select AWS Cloud Connect from the service list.
- Click Go to service form.
- Complete the following fields:
- Label: Enter a descriptive name for the AWS Cloud Connect.
- Tags (Optional): Add metadata for internal organization.
- Cloud Type: Choose AWS.
- Speed: Select the bandwidth for your connection.
- Cloud connection type: Select Redundant for high availability or Single.
- Virtual Network: Select the VNET to which this circuit will attach.
- Primary Subnet: Enter the primary BGP peering subnet in CIDR notation (usually a /30 or /31).
- Secondary Subnet: Enter the secondary BGP peering subnet in CIDR notation (required for redundant setups).
- Vlan (C-TAG): Enter your C-Tag.
- AS Number: Enter your Local AS Number for the BGP connection.
- Click Save.
Step 3 - Connect to AWS
- From the AWS Cloud Connect service screen, expand General in the left sidebar and select Basic.
- On the General Details screen, click Connect to the cloud (bottom-left box).
- In the right sidebar, enter your AWS Account ID.
- Click Connect to the cloud
Step 4 - Accept the Connection in AWS
Once the service is created in the portal, Wanscale will provision a Hosted Connection to your AWS account.
- Log in to the AWS Management Console.
- Navigate to Direct Connect > Connections.
- Select the new connection from Wanscale (it will be in a
pendingstate). - Click Accept to activate the connection.
Step 5 - Create a Virtual Interface (VIF)
After accepting the connection, you must create a Private or Public Virtual Interface (VIF) in the AWS Console to facilitate traffic.
- In the AWS Direct Connect console, select your connection.
- Click Create Virtual Interface.
- Follow the AWS prompts to associate it with your Direct Connect Gateway or Virtual Private Gateway.
- Note the Amazon Side ASN and the BGP Auth Key provided by AWS.
Step 6 - Configure BGP sessions
Finally, configure the BGP settings in the Wanscale portal to enable routing.
- Navigate to the Home page of the Wanscale Platform.
- Select your AWS Cloud Connect service.
- In the left sidebar, expand Configuration and select BGP.
- Click the button Add BGP Configuration.
- Complete the following fields:
- Neighbor IP: Select the appropriate Neighbor IP (the AWS side of the peering subnet).
- BGP Password: Enter the BGP Auth Key provided during the VIF creation in AWS.
- Enable BFD: Toggle to On for sub-second failure detection.
Route Policy Settings:
- Click Add import settings to define rules for incoming routes from AWS.
- Set Local Preference and specify Import Prefixes if necessary.
- Click Add export settings to define rules for outgoing routes to AWS.
- Select Export VNET Space to advertise your platform routes.
- Click Add import settings to define rules for incoming routes from AWS.
- Click Create.
Note
Understanding BFD: Bidirectional Forwarding Detection (BFD) provides rapid link failure detection. If "hello" packets fail, BFD instantly triggers BGP to reroute, ensuring higher availability than standard BGP timers. AWS supports BFD on all Direct Connect connections.
Note
Applying Changes: Like all networking services in the portal, your new AWS Cloud Connect will not be active until you deploy the changes. See Workflows and Applying Changes.