AWS DirectConnect

Question

If my AWS Direct Connect fails, will I lose my connectivity?

Answer 1

If a backup AWS Direct connect has been configured, in the event of a failure it will switch over to the second one. It is recommended to enable Bidirectional Forwarding Detection (BFD) when configuring your connections to ensure faster detection and failover. On the other hand, if you have configured a backup IPsec VPN connection instead, all VPC traffic will failover to the backup VPN connection automatically. Traffic to/from public resources such as Amazon S3 will be routed over the Internet. If you do not have a backup AWS Direct Connect link or a IPsec VPN link, then Amazon VPC traffic will be dropped in the event of a failure.

Comments

How to do auto failover from Direct Connect to IPSec VPN connection? It seems no configuration option in AWS console.

---

@simon you can get a brief idea on how to do auto failover from Direct Connect to IPSec VPN connection here:-
https://aws.amazon.com/premiumsupport/knowledge-center/configure-vpn-backup-dx/
Amazon Virtual Private Cloud (VPC) provides multiple network connectivity options depending on your network design and requirements. You can choose to use the Internet or an Amazon Web Services (AWS) Direct Connect connection as your backbone network. Terminate your connection either into AWS or into user-managed network endpoints. With AWS, you can specify how network routing will be delivered between Amazon VPC and your networks, leveraging either AWS or user-managed network equipment and routes. You can only use AWS that has been provided by Adobe.

Answer 2

If you have configured a back-up IPsec VPN connection instead, all VPC traffic willfailover to the VPN connection automatically. ... If you do not have a backup AWS Direct Connect link or a IPsec VPN link, then Amazon VPC traffic will be dropped in the event of a failure.