Skip to main content

Overview

Peering in Aviatrix enables direct connectivity between VPCs/VNets across your cloud infrastructure. This provides a secure, high-performance path for traffic to flow between cloud networks without traversing the public internet.

Types of Peering

Encrypted Peering

Aviatrix Encrypted Peering creates a secure tunnel between two Aviatrix Gateways deployed in different VPCs/VNets. This peering:
  • Encrypts all traffic between the peered networks using IPsec
  • Works across different cloud providers (multi-cloud peering)
  • Supports peering between different regions
  • Provides high availability with automatic failover

Native Peering

Aviatrix can also orchestrate native cloud peering connections:
  • AWS VPC Peering - Direct peering between VPCs in AWS
  • Azure VNet Peering - Peering between VNets in Azure
  • GCP VPC Peering - Network peering in Google Cloud
Native peering offers lower latency but lacks encryption and is limited to the same cloud provider.

Peering Architecture

┌─────────────────┐                    ┌─────────────────┐
│     VPC A       │                    │     VPC B       │
│                 │                    │                 │
│  ┌───────────┐  │   IPsec Tunnel     │  ┌───────────┐  │
│  │  Aviatrix │◄─┼────────────────────┼─►│  Aviatrix │  │
│  │  Gateway  │  │                    │  │  Gateway  │  │
│  └───────────┘  │                    │  └───────────┘  │
│                 │                    │                 │
│   Workloads     │                    │   Workloads     │
└─────────────────┘                    └─────────────────┘

Key Features

FeatureEncrypted PeeringNative Peering
EncryptionYes (IPsec)No
Multi-CloudYesNo
Cross-RegionYesYes
High AvailabilityYesVaries
Centralized ManagementYesYes

Use Cases

  • Multi-Cloud Connectivity: Connect workloads across AWS, Azure, GCP, and OCI
  • Secure Data Transfer: Encrypt sensitive data in transit between VPCs
  • Hybrid Cloud: Extend on-premises networks to multiple cloud VPCs
  • Disaster Recovery: Connect production and DR sites across regions or clouds

Considerations

When planning your peering architecture, consider:
  • Latency Requirements: Native peering typically has lower latency than encrypted peering
  • Security Requirements: Use encrypted peering when data must be protected in transit
  • Scalability: Aviatrix Transit architecture may be more appropriate for large-scale deployments
  • Cost: Consider data transfer costs between regions and cloud providers