Welcome to Happa, Anonymous Saturday, May 10 2025

Blog

Sync on-premise MySQL to private RDS using DMS

Synchronize data from an on-premise MySQL server to a privately-run RDS on AWS via a Site-To-Site VPN.

A simple configuration diagram is shown below.

It is assumed that the Site-To-Site VPN connection and Transit Gateway have already been created.

References : How to connect to AWS via Site-to-Site VPN using Juniper SRX300

The tasks to be performed are as follows:

We assume that you are already hosting MySQL on RDS.

Create the following definition in DMS:

  1. Creating a Replication Instance
  2. Create a Source Endpoint
  3. Create a Target Endpoint
  4. Creating a Database migration tasks

Share Transit Gateway with Resource Access Manager

This time, I would like to describe how to share a Transit Gateway created with a Site-To-Site VPN connection with other AWS accounts.

A simple configuration diagram is shown below.

It is assumed that the Site-To-Site VPN connection and Transit Gateway have already been created.

References : How to connect to AWS via Site-to-Site VPN using Juniper SRX300

The tasks to be performed are as follows:

(1) Work on the AWS account A

  1. Creating a Resource Share

(2) Work on the AWS account B

  1. Accepting an invitation
  2. Creating a Transit Gateway Attachment

Resolve names by referencing the AWS inbound resolver from the on-premises Windows DNS Server

In an environment using split-brain DNS, name resolution for resources within AWS is performed from an on-premises DNS server via a private network.

Create an environment with the configuration shown in the image below.

The tasks to be performed are as follows:

(1) Work on the AWS side

  1. Creating Lambda Function
  2. Issuance of official certificates
  3. Creating an ALB
  4. Configuring route53

(2) Work on the On-Premise side

  1. Configuring a Conditional Forwarder

How to connect to AWS via Site-to-Site VPN using Juniper SRX300

I would like to describe how to establish a Site-to-Site VPN connection with AWS using SRX300.

Create an environment with the configuration shown in the image below.

The tasks to be performed are as follows:

(1) Work on the AWS side

  1. Create a customer gateway
  2. Create a transit gateway
  3. Create a Site-To-Site VPN connections
  4. Create a transit gateway attachment

(2) Work on the SRX300 side

  1. Interface configuration
  2. Configuring VLANs
  3. Configuring protocols
  4. Setting policy-options
  5. Security Settings