By default, instances in your data center cannot communicate securely to instances in the VPC. Establishing an IPSec VPN enables you to do so. There are three components of a VPN connection which are as follows:
- Virtual Private Gateway (VGW) is a part of the VPN connection on the AWS side. AWS provides two redundant IPSec tunnels in the VPC to provide high availability.
- Customer Gateway (CGW) is a part of the VPN connection on the data center. To have redundant connections for high availability, we need multiple CGWs configured in the data center. It will ensure continuous connectivity, even if one fails.
- VPN connection that connects between VGW and CGW.
To have connectivity to multiple data centers, you need to configure different CGWs and configure the VPN channel with the same VGW:
Multiple VPN Connection with VPC
Source:
http...
