hybrid-cloud-networking

Configure VPN and dedicated connections between on-premises infrastructure and cloud providers.

Updated Apr 23, 2026
One-click install
npx skills add https://github.com/SanketAdlak/PDMProjectDesign --skill hybrid-cloud-networking-sanketadlak
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hybrid-cloud-networking
Source: https://github.com/SanketAdlak/PDMProjectDesign/tree/main/.agents/skills/hybrid-cloud-networking
Command: npx skills add https://github.com/SanketAdlak/PDMProjectDesign --skill hybrid-cloud-networking-sanketadlak

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Connecting on-premises data centers to cloud platforms requires choosing between VPN and dedicated circuits, configuring BGP routing, and ensuring redundancy across AWS, Azure, GCP, and OCI, which is error-prone without structured guidance. ## Core Features & Use Cases - Multi-Cloud Connectivity Options: Terraform examples and guidance for AWS Site-to-Site VPN and Direct Connect, Azure VPN Gateway and ExpressRoute, GCP Cloud VPN and Interconnect, and OCI IPSec VPN and FastConnect. - Hybrid Network Patterns: Reference architectures for hub-and-spoke, multi-region, and multi-cloud hybrid topologies with BGP routing configuration. - HA, Security, and Cost Guidance: Dual-tunnel failover, active-active ECMP routing, encryption best practices, monitoring commands, and cost optimization strategies. - Use Case: An enterprise migrating workloads gradually to AWS and Azure uses this Skill to provision redundant VPN tunnels with BGP failover, then upgrades to Direct Connect and ExpressRoute for production traffic. ## Quick Start Help me set up a redundant site-to-site VPN connection between my on-premises data center and AWS with BGP routing.

Frequently Asked Questions about hybrid-cloud-networking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I connect on-premises network to AWS with VPN?▼

Create an AWS Site-to-Site VPN by provisioning a virtual private gateway attached to your VPC, a customer gateway with your on-premises public IP and BGP ASN, and an IPSec VPN connection. Terraform resources like aws_vpn_gateway, aws_customer_gateway, and aws_vpn_connection automate this setup.

AWS Direct Connect vs Site-to-Site VPN which should I use?▼

Site-to-Site VPN runs over the internet at up to 1.25 Gbps per tunnel and suits moderate bandwidth at lower cost. Direct Connect provides dedicated 1-100 Gbps connections with lower latency and consistent bandwidth, but costs more and requires setup time.

Does Azure ExpressRoute support private connectivity to VNets?▼

Yes, Azure ExpressRoute provides private connectivity to VNets through a connectivity provider, bypassing the public internet. It supports up to 100 Gbps with low latency and offers a premium tier for global connectivity.

How do I make hybrid cloud VPN connections highly available?▼

Deploy dual VPN tunnels to separate customer gateways and use BGP for automatic failover. For higher availability, configure active-active setups with multiple connections from different locations and equal-cost multi-path routing.

What BGP ASN should I use for cloud VPN connections?▼

Use a private ASN such as 65000 for your on-premises router. Cloud-side defaults include 64512 for AWS and 65515 for Azure, while GCP and OCI assign provider-side values. Advertise your on-premises CIDRs and accept cloud VPC or VNet routes.