Harian, and welcome back into this video, will be discussing about the site to site Dunnill, now
a site to site the Internet allows two networking domains to communicate securely between each other
over an interesting network like Internet.
No, within the name itself, you have site to site.
So basically there are two sites which are available here.
Now, these two sites can be two different locations from which you want to communicate securely.
So it can be between a two instance and the data center.
It can be between the two different websites.
It can be between established in Asia or any other locations.
Now, do remember that site to site on it basically is referred to as Espoo is also in case a few years.
What else does it basically say to say no one's the Tonalist established?
So let's assume that you have the C instance.
So this axis of termination and you have the data center.
So there is a VPN which is established.
You know, one of the challenges that organization might typically face in a site to say to bid is the
high availability.
So basically, if you Selya, there is a single terminal end point on each of the sites.
So you have the easy to instance which access a VPN termination point.
And if this easy two instance goes down, then the entire terminal would break.
Now, sometime back when it did not really have in the region, VPC building site to site Donella was
pretty common.
In fact, let's assume that you wanted to establish a tunnel between Singapore and Mumbai.
VPC building was not an option back then, so organization used to use side to side with Internet pretty
extensively.
And also nowadays, if you see a lot of organizations, they are based on hybrid cloud or they are based
on on premise and so forth.
So it's kind of a scenario of having a site to say to the Internet is extremely important.
So we were discussing about the availability challenges on how easy to instance if you're using it for
the site to site and if that easy to install is goes down and entire VPN connection would break.
So in order to work on that, what organizations typically do is they establish multiple donors.
So you see you have one dollar.
This is an active donor and then you have one more donor.
This is a passive donor.
So if one Dan'l goes down, then you can switch over to the passive donor for high availability.
So this is a sample diagram.
So this is a tunnel established between Mumbai and North Virginia.
Again, you can do this via web experience as well.
But let's assume that this is the reason underwritings idea Asia.
Then you need to use a site to site VPN.
Now, when it comes to the architecture of site to site VPN.
There are certain key terminologies that you need to understand.
The first one is the virtual private gateway and second is the customer gateway.
Customer Gateway is nothing but the VPN termination and point on the customer side.
So this can be a firewall.
This can be a server which acts as a IPCA, creepy internal termination endpoint, etc. Not on the either
side.
We make use of virtual private gateway.
However, I do remember that there is not a mandatory need to have a virtual private gateway.
Virtual private gateway has its own advantage.
Like we were discussing that if the CO2 incident goes down, the entire VPN terminal that we have established
dooryard that will also break.
So now what happens in Wajeha Private Gateway is that this virtual private gateway is highly available.
So in order to understand this, let's take the example of this specific diagram.
So you're a virtual private gateway, has a built in high availability for a VPN connection.
So basically what happens is that this virtual private gateway has to end point IP addresses and this
end point IP address are located in a different availability zone.
So you have the endpoint IP one year, you have the endpoint IP to you.
So now what do you do from your customer site?
You establish to VPN donors know to VPN donors would be for a point IP and the endpoint IP to and together
they act as a single VPN connection.
Now do remember that even though you have a virtual private gateway, if you implement this in your
organization, specifically if you are having multiple virtual private gateways and multiple VPN connections,
there are a lot of instances where one of the endpoint goes down.
And then you have to switch to end point a bit to know the great thing here is that the high availability
is managed by the elderly.
So we do not really have to worry about this.
But you will get into situations where you will see that one of the tunnel is done.
However, if you have set up your VPN connection properly, you do not really have to worry because
high availability will be taken care.
So this can be understood with the diagram also.
So this is one of the screens that I had taken from a different video.
So you see within the VPN connection.
So this is a side to side tunnel and this tunnel has two IP addresses already.
The first IP addresses, 18 to one, takes 150 to 193, and second is 18 to 22, 176.
So currently, you see there is only one endpoint which has a status of up.
And second, has this status of down.
Ideally, if you are implementing it, make sure that both of them are up.
That basically means that from your customer location, you have to VPN tenants which are established.
So this was just for the representation of the two IP addresses associated with the end points for the
virtual private gateway.
So this is the high level.
What have you about side to side done on how exactly a virtual private gateway helps in establishing
a highly available site to site, at least from the established perspective?
No.
If before we conclude I just like to share is that although you have the high availability over here
on the right hand side, you still have one drop rule here, or it can be one server.
And if this server goes down or if this router goes down, then again your tunnel breaks.
However, for example, one of the primary things that you need to remember is on how you can achieve
the high availability, at least from the A.W. side, which is achieved with the help of a virtual private
gateway.
So this will conclude this video.
I hope this video has been informative for you.
And I look forward to see you in the next video.