Eu tenho 2 VPC no AWS VPC-A 172.31.0.016
e VPC-B 172.17.0.0/24
Eu criei um peering de VPC e posso alcançar todos os serviços em execução no VPC-B
de VPC-A
e vice-versa.
Agora criei uma rede virtual de flanela em VPC-B
com o endereço 172.17.0.0/16
etcdctl set /coreos.com/network/config '{ "Network": "10.17.0.0/16", "Backend": {"Type": "aws-vpc"} }'
O backend aws-vpc
está funcionando porque as rotas apareceram na tabela de roteamento VPC-B
e as máquinas na VPC podem acessar serviços hospedados na rede de flanela, mas não consegui alcançar hosts em 172.17.0.0/16
de VPC-A
.
VPC-A
tabela de roteamento:
$ aws ec2 describe-route-tables --route-table-id rtb-f6e7e59d
------------------------------------------------------------------------------------------------------
| DescribeRouteTables |
+----------------------------------------------------------------------------------------------------+
|| RouteTables ||
|+------------------------------------------------+-------------------------------------------------+|
|| RouteTableId | VpcId ||
|+------------------------------------------------+-------------------------------------------------+|
|| rtb-f6e7e59d | vpc-ffe7e594 ||
|+------------------------------------------------+-------------------------------------------------+|
||| Associations |||
||+-------------+---------------------------------------------------+------------------------------+||
||| Main | RouteTableAssociationId | RouteTableId |||
||+-------------+---------------------------------------------------+------------------------------+||
||| True | rtbassoc-f5e7e59e | rtb-f6e7e59d |||
||+-------------+---------------------------------------------------+------------------------------+||
||| Routes |||
||+-----------------------+---------------+-------------------+---------+--------------------------+||
||| DestinationCidrBlock | GatewayId | Origin | State | VpcPeeringConnectionId |||
||+-----------------------+---------------+-------------------+---------+--------------------------+||
||| 172.31.0.0/16 | local | CreateRouteTable | active | |||
||| 172.17.0.0/16 | | CreateRoute | active | pcx-ea7ea083 |||
||| 10.17.0.0/16 | | CreateRoute | active | pcx-ea7ea083 |||
||| 0.0.0.0/0 | igw-f3e7e598 | CreateRoute | active | |||
||+-----------------------+---------------+-------------------+---------+--------------------------+||
VPC-B
tabela de roteamento:
$ aws ec2 describe-route-tables --route-table-id rtb-c0729da4
-------------------------------------------------------------------------------------------------------------------------------------------------------------
| DescribeRouteTables |
+-----------------------------------------------------------------------------------------------------------------------------------------------------------+
|| RouteTables ||
|+---------------------------------------------------------------------------+-----------------------------------------------------------------------------+|
|| RouteTableId | VpcId ||
|+---------------------------------------------------------------------------+-----------------------------------------------------------------------------+|
|| rtb-c0729da4 | vpc-79a3991c ||
|+---------------------------------------------------------------------------+-----------------------------------------------------------------------------+|
||| Associations |||
||+-----------------+---------------------------------------------------------+---------------------------------+-----------------------------------------+||
||| Main | RouteTableAssociationId | RouteTableId | SubnetId |||
||+-----------------+---------------------------------------------------------+---------------------------------+-----------------------------------------+||
||| False | rtbassoc-8a48e7ee | rtb-c0729da4 | subnet-e655b982 |||
||| False | rtbassoc-8b48e7ef | rtb-c0729da4 | subnet-ddfde9aa |||
||| False | rtbassoc-8948e7ed | rtb-c0729da4 | subnet-5f725e06 |||
||+-----------------+---------------------------------------------------------+---------------------------------+-----------------------------------------+||
||| Routes |||
||+----------------------+---------------+-------------+------------------+---------------------+-------------------+----------+--------------------------+||
||| DestinationCidrBlock | GatewayId | InstanceId | InstanceOwnerId | NetworkInterfaceId | Origin | State | VpcPeeringConnectionId |||
||+----------------------+---------------+-------------+------------------+---------------------+-------------------+----------+--------------------------+||
||| 172.17.0.0/24 | local | | | | CreateRouteTable | active | |||
||| 10.17.75.0/24 | | i-5a19fdd6 | 616776393312 | eni-ad3930f7 | CreateRoute | active | |||
||| 172.31.0.0/16 | | | | | CreateRoute | active | pcx-ea7ea083 |||
||| 0.0.0.0/0 | igw-b3eb9ad6 | | | | CreateRoute | active | |||
||+----------------------+---------------+-------------+------------------+---------------------+-------------------+----------+--------------------------+||