skills.rest
masermediagroup-stack
masermediagroup-stackCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

architecting-networks

Design cloud network architectures with VPC patterns, subnet strategies, and hybrid connectivity.

1|Updated Feb 24, 2026
Search Tags:#aws#terraform#zero trust#vpc#cidr#network architecture#hybrid connectivity
One-click install
npx skills add https://github.com/masermediagroup-stack/maser-media --skill architecting-networks-masermediagroup-stack
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: architecting-networks
Source: https://github.com/masermediagroup-stack/maser-media/tree/main/.cursor/skills/community/ai-design-components/skills/architecting-networks
Command: npx skills add https://github.com/masermediagroup-stack/maser-media --skill architecting-networks-masermediagroup-stack

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Designing secure, scalable cloud networks requires choosing between VPC topology patterns, planning non-overlapping CIDR blocks, configuring security controls, and estimating costs across AWS, GCP, and Azure, which is error-prone without structured guidance. ## Core Features & Use Cases - VPC Pattern Selection: Decision frameworks for flat, multi-VPC, hub-and-spoke, full mesh, and hybrid architectures with tradeoff analysis. - Subnet and CIDR Planning: Three-tier subnet design, multi-AZ distribution, IPAM strategies, and a CIDR calculator script for IP allocation. - Security and Zero Trust: Security group microsegmentation patterns, Network ACL guidance, VPC Flow Logs monitoring, and identity-based access controls. - Use Case: When migrating from a flat network to a hub-and-spoke architecture with Transit Gateway and Direct Connect, use this Skill to select the pattern, plan CIDR ranges, and generate Terraform configurations. ## Quick Start Design a hub-and-spoke VPC architecture for three environments on AWS with CIDR planning and Terraform output.

Frequently Asked Questions about architecting-networks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I choose between VPC peering and Transit Gateway?▼

Use VPC peering for 2-5 VPCs needing low-latency direct communication without centralized inspection. Choose Transit Gateway when connecting 5 or more VPCs, requiring centralized security inspection, or needing hybrid connectivity to on-premises networks.

How do I plan CIDR blocks for AWS VPC subnets?▼

Allocate non-overlapping CIDR ranges across VPCs, size subnets by workload (public /26, private /20, database /24), and reserve 20-30% address space for growth. The included cidr-calculator.py script computes usable IPs and splits CIDR blocks into subnets.

Does this skill support GCP and Azure networking?▼

Yes, it covers unified networking concepts across AWS, GCP, and Azure, including GCP custom mode VPCs with Cloud NAT and Azure hub-and-spoke VNets with Network Security Groups. Reference docs map equivalent services like PrivateLink, Private Service Connect, and Private Link.

When should I use Direct Connect instead of VPN?▼

Use Direct Connect for production workloads needing consistent low latency, throughput above 1.25 Gbps, or data transfers exceeding roughly 8 TB per month where it becomes cheaper than VPN. VPN suits dev/test environments, backup connectivity, and quick setups.

How do I reduce NAT Gateway costs in AWS?▼

Use free Gateway VPC Endpoints for S3 and DynamoDB to bypass NAT data processing charges, deploy a single NAT Gateway for dev/test environments, and consider a centralized egress VPC pattern in hub-and-spoke topologies.

Related Skills

Explore More Software Engineering Skills→
ancolemanancoleman
503

architecting-networks

Design cloud network architectures with VPC topology, subnetting, and security guidance.

Community
Advanced
aws-samplesaws-samples
12

networking

Design and troubleshoot AWS VPC topologies, subnets, and security boundaries.

Official
Advanced
toplyr-narfurtoplyr-narfur

network-security-advanced

Harden VPS security for Urbit deployments with SSH, firewall, and intrusion detection.

Community
Advanced
fgarofalo56fgarofalo56
6

azure-aks

Provide guidance and commands for deploying and managing Azure Kubernetes Service clusters.

Community
Advanced