DEV Community

Cover image for AWS Networking with Terraform: VPC Transit Gateway between VPCs
Chinmay Tonape
Chinmay Tonape

Posted on • Updated on

AWS Networking with Terraform: VPC Transit Gateway between VPCs

In our previous post, we implemented an AWS networking concept, establishing a peering connection between two Virtual Private Clouds (VPCs).

Now, we're stepping up our game by exploring how to connect multiple VPCs using the powerful AWS Transit Gateway. We'll walk through the process using Terraform modules to create distinct components seamlessly.

A transit gateway is a network transit hub that you can use to interconnect your virtual private clouds (VPCs) and on-premises networks. As your cloud infrastructure expands globally, inter-Region peering connects transit gateways together using the AWS Global Infrastructure. All network traffic between AWS data centers is automatically encrypted at the physical layer.

Architecture Overview:

Before diving into implementation, let's outline the architecture we'll be working with:

Transit Gateway Diagram

Step 1: Creating 3 VPCs with Non-overlapping CIDRs

Create vpc_a, vpc_b and vpc_c with non-overlapping cidrs. Please refer to my github repo in resources section below.



####################################################
# Create VPCs and components
####################################################

module "vpc_a" {
  source               = "./modules/vpc"
  name                 = "VPC-A"
  aws_region           = var.aws_region
  vpc_cidr_block       = var.vpc_cidr_block_a #"10.1.0.0/16"
  public_subnets_cidrs = [cidrsubnet(var.vpc_cidr_block_a, 8, 1)]
  enable_dns_hostnames = var.enable_dns_hostnames
  aws_azs              = var.aws_azs
  common_tags          = local.common_tags
  naming_prefix        = local.naming_prefix
}


module "vpc_b" {
  source               = "./modules/vpc"
  name                 = "VPC-B"
  aws_region           = var.aws_region
  vpc_cidr_block       = var.vpc_cidr_block_b #"10.2.0.0/16"
  public_subnets_cidrs = [cidrsubnet(var.vpc_cidr_block_b, 8, 1)]
  enable_dns_hostnames = var.enable_dns_hostnames
  aws_azs              = var.aws_azs
  common_tags          = local.common_tags
  naming_prefix        = local.naming_prefix
}

module "vpc_c" {
  source               = "./modules/vpc"
  name                 = "VPC-C"
  aws_region           = var.aws_region
  vpc_cidr_block       = var.vpc_cidr_block_c #"10.3.0.0/16"
  public_subnets_cidrs = [cidrsubnet(var.vpc_cidr_block_c, 8, 1)]
  enable_dns_hostnames = var.enable_dns_hostnames
  aws_azs              = var.aws_azs
  common_tags          = local.common_tags
  naming_prefix        = local.naming_prefix
}


Enter fullscreen mode Exit fullscreen mode

Step 2: Deploying EC2 Instances in Each VPC

Create an EC2 instance in each VPC. Please refer to my github repo in resources section below.



####################################################
# Create EC2 Instances
####################################################

module "vpc_a_public_host" {
  source        = "./modules/web"
  instance_type = var.instance_type
  instance_key  = var.instance_key
  subnet_id     = module.vpc_a.public_subnets[0]
  vpc_id        = module.vpc_a.vpc_id
  ec2_name      = "Public Host A"
  common_tags   = local.common_tags
  naming_prefix = local.naming_prefix
}

module "vpc_b_public_host" {
  source        = "./modules/web"
  instance_type = var.instance_type
  instance_key  = var.instance_key
  subnet_id     = module.vpc_b.public_subnets[0]
  vpc_id        = module.vpc_b.vpc_id
  ec2_name      = "Public Host B"
  common_tags   = local.common_tags
  naming_prefix = local.naming_prefix
}


module "vpc_c_public_host" {
  source        = "./modules/web"
  instance_type = var.instance_type
  instance_key  = var.instance_key
  subnet_id     = module.vpc_c.public_subnets[0]
  vpc_id        = module.vpc_c.vpc_id
  ec2_name      = "Public Host C"
  common_tags   = local.common_tags
  naming_prefix = local.naming_prefix
}


Enter fullscreen mode Exit fullscreen mode

Step 3: Configuring a Transit Gateway to Facilitate Inter-VPC Communication

Create Transit Gateway with route table attachments



####################################################
# Create Transit Gateway and attachments
####################################################

module "transit_gateway" {
  source                 = "./modules/transit-gw"
  vpc_ids                = [module.vpc_c.vpc_id, module.vpc_b.vpc_id, module.vpc_a.vpc_id]
  subnet_ids             = [module.vpc_c.public_subnets[0], module.vpc_b.public_subnets[0], module.vpc_a.public_subnets[0]]
  common_tags            = local.common_tags
  naming_prefix          = local.naming_prefix
  route_table_ids        = [module.vpc_a.public_route_table_id, module.vpc_b.public_route_table_id, module.vpc_c.public_route_table_id]
  destination_cidr_block = "10.0.0.0/8"
}


Enter fullscreen mode Exit fullscreen mode

Steps to Run Terraform

Follow these steps to execute the Terraform configuration:



terraform init
terraform plan 
terraform apply -auto-approve


Enter fullscreen mode Exit fullscreen mode

Upon successful completion, Terraform will provide relevant outputs.



Apply complete! Resources: 28 added, 0 changed, 0 destroyed.

Outputs:

transit_gateway_id = "tgw-06f795ea438d9e040"
vpc_a_public_host_IP = "3.95.224.131"
vpc_b_public_host_IP = "54.173.114.74"
vpc_c_public_host_IP = "44.203.198.154"


Enter fullscreen mode Exit fullscreen mode

Testing the outcome

VPCs Created with exclusive CIDRs

VPCs with exclusive CIDRs

Transit Gateway and attachments

Transit Gateway

Transit Gateway Attachments

Transit Gateway Route Table:

Transit Gateway Route Table

Route Tables with route to transit gateway

Route Tables

Connecting to VPC-B and VPC-C Instance from VPC-A Instance

VPC_A_to_B_C

Connecting to VPC-C and VPC-A Instance from VPC-B Instance

VPC_B_to_C_A

Connecting to VPC-A and VPC-B Instance from VPC-C Instance

VPC_C_to_A_B

Cleanup:

Remember to stop AWS components to avoid large bills.



terraform destroy -auto-approve


Enter fullscreen mode Exit fullscreen mode

In the upcoming module, we'll delve deeper into AWS networking capabilities by setting up VPC Interface Endpoints. These endpoints enhance security and efficiency by providing private connectivity to supported AWS services, further enriching our network architecture.

Resources:

Github Link: https://github.com/chinmayto/terraform-aws-networking-vpc-transit-gateway
VPC Transit Gateway: https://docs.aws.amazon.com/vpc/latest/tgw/how-transit-gateways-work.html

Top comments (0)