Aviatrix provides a point and click solution to create an encrypted tunnel between two VPCs. The two VPCs could be in the same region, in different regions (inter region) and in different clouds (inter cloud)

This guide helps you configure an encrypted peering. For cluster peering, refer to this doc.

Encrypted Peering

  1. At Gateway menu, create a gateway in an existing VPC/VNet.
  2. Repeat the step 1 for a different VPC/VNet.
  3. Select “Enable HA” if you wish to build a backup encrypted tunnel for HA. Note that you must first create two respective backup gateways prior to this step. To launch backup gateways, go to Gateway page, select the gateway, click Edit, At “Gateway for High Availability Peering” field, select one public subnet and click Create.
  4. At Peering -> Encrypted Peering, click New Peering to peer the two gateways.
  5. Note “Over AWS Peering” field currently only works when used in conjunction to transitive peering. When this field is selected, the controller does not program the AWS routing table to points peer VPC CIDR routes to the gateway.
  6. For a complete end to end solution, check out this reference design.