Site-to-Site VPN connects on-premises to your VPC over encrypted internet tunnels.
Components:
- Virtual Private Gateway: Cloud endpoint
- Customer Gateway: Your on-premises device
- VPN connection: tunnels for redundancy
Setup:
Create Virtual Private Gateway, attach to VPC
Create Customer Gateway for your device
Create VPN connection
Download config, configure your device
Update VPC routes
Performance:
- Limited by your internet bandwidth
- Variable latency
- Each tunnel up to Gbps
VPN works for initial hybrid connectivity. Many start with VPN and add Direct Connect later.