AWS Cloud Architecture•Part 2: Networking, VPC & Traffic Routing (6 - 20)
Site-to-Site VPN vs AWS Direct Connect (DX).
In Simple Words:
- Site-to-Site VPN: Encrypted IPsec tunnel running over the public internet. Fast and inexpensive to set up, but subject to public internet jitter and latency spikes.
- Direct Connect: Dedicated physical fiber optic connection from your datacenter directly into AWS. Guarantees consistent high throughput, ultra-low latency, and complete privacy.
bash
# Check Direct Connect virtual interface connection state:
aws directconnect describe-virtual-interfaces --virtual-interface-id dxvif-12345678 --query "virtualInterfaces[0].virtualInterfaceState"