Configure secure, high-performance connectivity between on-premises infrastructure and cloud platforms using VPNs and dedicated connections. Use this when building hybrid cloud architectures, connecting data centers to the cloud, or implementing secure cross-premises networking.
English | 日本語
VPN、Direct Connect、ExpressRouteを使用したオンプレミスとクラウド環境間のセキュアで高性能な接続の構成。
オンプレミスデータセンターとクラウドプロバイダー(AWS、Azure、GCP)間のセキュアで信頼性の高いネットワーク接続を確立します。
resource "aws_vpn_gateway" "main" {
vpc_id = aws_vpc.main.id
tags = {
Name = "main-vpn-gateway"
}
}
resource "aws_customer_gateway" "main" {
bgp_asn = 65000
ip_address = "203.0.113.1"
type = "ipsec.1"
}
resource "aws_vpn_connection" "main" {
vpn_gateway_id = aws_vpn_gateway.main.id
customer_gateway_id = aws_customer_gateway.main.id
type = "ipsec.1"
static_routes_only = false
}
参照: references/direct-connect.md参照
resource "azurerm_virtual_network_gateway" "vpn" {
name = "vpn-gateway"
location = azurerm_resource_group.main.location
resource_group_name = azurerm_resource_group.main.name
type = "Vpn"
vpn_type = "RouteBased"
sku = "VpnGw1"
ip_configuration {
name = "vnetGatewayConfig"
public_ip_address_id = azurerm_public_ip.vpn.id
private_ip_address_allocation = "Dynamic"
subnet_id = azurerm_subnet.gateway.id
}
}
オンプレミスデータセンター
↓
VPN/Direct Connect
↓
Transit Gateway (AWS) / vWAN (Azure)
↓
├─ 本番VPC/VNet
├─ ステージングVPC/VNet
└─ 開発VPC/VNet
オンプレミス
├─ Direct Connect → us-east-1
└─ Direct Connect → us-west-2
↓
クロスリージョンピアリング
オンプレミスデータセンター
├─ Direct Connect → AWS
├─ ExpressRoute → Azure
└─ Interconnect → GCP
オンプレミスルーター:
- AS番号: 65000
- アドバタイズ: 10.0.0.0/8
クラウドルーター:
- AS番号: 64512 (AWS)、65515 (Azure)
- アドバタイズ: クラウドVPC/VNet CIDR
resource "aws_vpn_connection" "primary" {
vpn_gateway_id = aws_vpn_gateway.main.id
customer_gateway_id = aws_customer_gateway.primary.id
type = "ipsec.1"
}
resource "aws_vpn_connection" "secondary" {
vpn_gateway_id = aws_vpn_gateway.main.id
customer_gateway_id = aws_customer_gateway.secondary.id
type = "ipsec.1"
}
# AWS VPN
aws ec2 describe-vpn-connections
aws ec2 get-vpn-connection-telemetry
# Azure VPN
az network vpn-connection show
az network vpn-connection show-device-config-script
references/vpn-setup.md - VPN設定ガイドreferences/direct-connect.md - Direct Connectセットアップmulti-cloud-architecture - アーキテクチャ決定用terraform-module-library - IaC実装用npx skills add amurata/hybrid-cloud-networking下载完整 Skill 目录,包含 SKILL.md 及所有相关文件
Search for places (restaurants, cafes, etc.) via Google Places API proxy on localhost.
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Start voice calls via the OpenClaw voice-call plugin.
Notion API for creating and managing pages, databases, and blocks.
Gemini CLI for one-shot Q&A, summaries, and generation.
Category:developer