AWS Advanced Networking — IPSEC Vpn with BGP (FRR and Docker)

The previous post covered IPSEC Vpn implementation with Static Routing and also had some points about IPSEC Vpn Implementation, this post aims at building IPSEC Vpn with Dynamic routing offered by VGW which is BGP.

IPSEC VPN Site-to-Site — How to and notes for Advanced Networking Certification

Article on FRR, Docker — https://towardsaws.com/configuring-bgp-and-open-source-frr-docker-on-aws-advanced-networking-d21fd0d76b33

we will re-use the same concept and will start a BGP route exchange over IPSEC VPN.

https://meteor-honeycup-16b.notion.site/Site-2-Site-VPN-BGP-FRR-Docker-d818267a1041401481554e6f30764dfb — Notes and Topology

Lab Video — https://youtu.be/PmLkHRAMfMU

Few points to note:

• BGP ASN support is both for 2-byte and 4-byte
• ASN Range is from 64512–65534
• BGP Peering will happen over Tunnel endpoints with address 169.254.x.y/z which amazon usually initiates by default
• If you are extending the strong-swan use case, you need to have a configuration reference for the static tunnel as there is no dynamic configuration generated for Strong-swan/Open-swan use case
• In static and dynamic routings…