About This Architecture

Multi-AZ VPC architecture spanning two availability zones with public and private subnets for resilient hybrid connectivity. Internet Gateway routes external traffic through redundant NAT Gateways in Public Subnets A and B to EC2 instances in isolated private subnets. Virtual Private Gateway establishes secure VPN tunnel from on-premises network to private workloads across both AZs. This pattern ensures high availability with automatic failover while maintaining strict network segmentation for compliance. Fork this diagram on Diagrams.so to customize CIDR ranges or add additional AZs for your deployment.

People also ask

How do I design a highly available AWS VPC with VPN connection to on-premises?

Deploy a VPC across two Availability Zones with public subnets hosting NAT Gateways and private subnets for EC2 workloads. Use Virtual Private Gateway to establish VPN connectivity to your on-premises network.