DevOps Articles

Inspect Subnet to Subnet traffic with Amazon VPC More Specific Routing

Since December 2019, Amazon Virtual Private Cloud (VPC) has allowed you to route all ingress traffic (also known as north – south traffic) to a specific network interface. For example, to inspect incoming traffic using an intrusion detection system (IDS) appliance or to route ingress traffic to a firewall. Since we launched this feature, many of you asked us to provide a similar capability to analyze traffic flowing from one subnet to another inside your VPC, also known as east – west traffic.

I add a route to send traffic for 10.0.1.0/24 (subnet of the application) to the appliance ENI (eni-055..).. The next step is to define the opposite route for replies, from the application subnet send traffic to 10.0.0.0/24 to the appliance ENI (eni-05..)..