AWS Site-to-Site VPN
Securely connect your on-premises network to the cloud using encrypted IPsec tunnels over the public internet.
The Core Components
What you need to establish a secure connection
Customer Gateway
The physical device or software application on your side of the Site-to-Site VPN connection.
Virtual Private Gateway
The VPN endpoint on the Amazon side of your Site-to-Site VPN connection.
IPsec Tunnels
Two encrypted tunnels for high availability, ensuring traffic flows even if one fails.
Routing Options
Support for both Static routing and Dynamic routing via Border Gateway Protocol (BGP).
How It Works
A visual representation of the encrypted data flow
Initiate a connection from your Customer Gateway using a public IP address.
AWS establishes two tunnels for redundancy, encrypting data with IKE/IPsec protocols.
Traffic is routed to your VPC resources securely as if they were on your local network.