Top 4 Cloud Networking Pitfalls to Avoid When Deploying SaaS

When someone reports an EC2 connectivity failure, what do you do? Open your Amazon VPC Console, launch an SSH session, and start typing CLI commands in search of clues.

Common root causes include problems related to:

- Route table updates
- Phantom network ACLs
- Security policies
- Missing BGP routes
- Overfilling route tables or summarization mistakes

Moreover, in many cases, networking is not an issue, but valuable time is lost eliminating the network as a cause before you can progress. Unfortunately, AWS does not natively provide the visibility and troubleshooting features needed by CloudOps and DevOps teams to identify and resolve problems quickly.

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei and Neel Kamal, head of field operations at Aviatrix, show you how to get on top of these issues and achieve operational readiness. They also demo tools that give you visibility, simplify troubleshooting, and alert you when issues are detected.

Who Should Watch?
CloudOps, DevOps, Cloud Architects, Cloud Network Engineers, Cloud Support teams, or anyone responsible for connectivity of cloud resources.

Slides Included
You will also receive the file containing the presentation slides.

There are legitimate reasons why AWS VPCs or Azure VNets need Internet access; for example, to receive software updates from vendors or integrate with native AWS services or third-party SaaS services. But this is substantially different from an on-premises use case, where traditional, full-featured firewalls are needed to filter co-mingled end-user traffic and application traffic. And while AWS provides a NAT gateway, it can be configured only on a per-VPC basis against a limited number of IP addresses.

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei and Neel Kamal, head of field operations at Aviatrix, examine the security and networking requirements for controlling VPC egress traffic – including a discussion of different approaches for establishing a shared services VPC – and what capabilities AWS offers natively. We also review and demonstrate a software-defined approach to egress security that helps avoid the complexity and expense of on-prem firewalls and the limitations of AWS NAT gateways by providing:

- Centralized control that enables policy assignment instantly across one VPC – or hundreds
- Flexible Layer 7 domain whitelisting that eliminates native AWS IP address limitations
- Methods for filtering on both HTTP and HTTPS traffic and utilizing whitelists and blacklists
- Integration with standard reporting and event correlation tools

Who Should Watch?
Anyone responsible for connectivity of cloud resources, including cloud architects, cloud infrastructure managers, cloud engineers, and networking staff.

Slides Included
You will also receive the file containing the presentation slides.

Whether your cloud applications are multi-tenanted SaaS solutions or standalone instances hosted for individual customers, ensuring reliable and secure VPC connectivity poses a variety of challenges. Within minutes of signing up a new customer, your operations team will be expected to:

- Build IPsec tunnels to, for example, support API connectivity or secure data as it moves between an on-premises database and the hosted app.
- Provision your customers’ administrative and end users with easy yet secure app access.
- Ensure internal teams have secure access to perform maintenance and support.

Now imagine doing all that for dozens of customers… or hundreds… or thousands. Not to mention your DevOps team, which needs isolated development and QA instances from which to build and deploy ongoing releases.

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei and Neel Kamal, head of field operations at Aviatrix, review the security and operational requirements for implementing automated VPC networking to meet customer expectations while enabling your own internal teams to do their work both inside and separate from customer instances.

Who Should Watch?
Product Managers, Line of Business Owners, Cloud Engineers, and DevOps

Slides Included
You will also receive the file containing the presentation slides.

OpenVPN is a popular and respected solution for enabling remote access to AWS VPCs for IT personnel, cloud developers, and a wide variety of end-user roles. While OpenVPN may be all that is needed to enable cloud access for a few users, it alone cannot meet the needs of growing organizations – particularly those that have security or compliance requirements. Similarly, Bastion hosts or jump hosts are often used when AWS is primarily focused on developers, but these tools likewise have scaling and security limitations.

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei and Neel Kamal, head of field operations at Aviatrix, review key requirements and compare the remote user VPN options available for managing and securing access to AWS VPC resources. They also demonstrate features that ensure your remote access tools and methodology are “enterprise cloud-ready.”

Who Should Watch?
Anyone responsible for connectivity of cloud resources, including cloud architects, cloud infrastructure managers, cloud engineers, and networking staff.

Slides Included
You will also receive the file containing the presentation slides.

Join Aviatrix for a discussion of next-generation transit hubs that are purpose-built to treat the network as code, rather than as a virtualized instance of a data center router. Learn how a software-defined approach can transform your AWS transit hub design from a legacy architecture exercise into a strategic infrastructure initiative that doesn’t require you to descend into the command-line interface and BGP of the IT networking world.

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei and Neel Kamal, head of field operations at Aviatrix, share the requirements that our most successful customers have insisted upon for their Global Transit Networks, and demonstrate the key features that deliver on those requirements.

Who Should Watch?
Anyone responsible for connectivity of cloud resources, including cloud architects, cloud infrastructure managers, cloud engineers, and networking staff.

Slides Included
You will also receive the file containing the presentation slides.

Once you've designed and secured your Global Transit Network, are you done? Are you ready to hand day-to-day responsibility over to an operations team? Or, are there other elements you need to ensure that the day-to-day operation of your transit hub is efficient and effective?

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei and Neel Kamal, head of field operations at Aviatrix, demonstrate the best practices they've gleaned from working with operations teams, all who require:

- Visibility: Do you have a way to centrally view your network, see performance bottlenecks, control security policies, and set other configuration details?
- Deep Analytics: Can you easily gather performance and audit data and export it to Splunk, DataDog, or other advanced reporting tools?
- Monitoring and Troubleshooting: Do you have a real-time view of network health, and how easily can you access the data needed to locate and fix issues?
- Alert Management: When issues do occur, what real-time alerting is available?

Who Should Watch?
Anyone responsible for connectivity of cloud resources, including cloud architects, cloud infrastructure managers, cloud engineers, and networking staff.

Slides Included
You will also receive the file containing the presentation slides.

In evaluating the security posture for your Global Transit Network, your first question might be: Why do I even need additional security? Isn’t what Amazon provides “out of the box” adequate? This is not the right question to ask first. It’s important to appreciate that, while Amazon says it has a shared security model, your Amazon EC2 instance may not meet your security requirements “by default.” Though Amazon makes specific security features available to you, it’s still up to you to choose judiciously among the many native and third-party options.

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei and Neel Kamal, head of field operations at Aviatrix, walk through five use cases and examine what Amazon provides, and the questions you need to be asking to implement Amazon services – or add additional ones – that are appropriate for your business. After examining each use case, we’ll show you how we handle it for our own business.

Who Should Watch?
Anyone responsible for connectivity of cloud resources, including cloud architects, cloud infrastructure managers, cloud engineers, and networking staff.

Slides Included
You will also receive the file containing the presentation slides.

Global Transit Network architecture is critical to the success of your AWS cloud deployment. Implemented correctly, a Global Transit Hub enables traffic to securely flow from on-prem to VPCs, or from VPC to VPC, in a way that minimizes complexity and cost and maximizes agility and availability. Implemented poorly, it becomes a choke point that is time-consuming – and costly – to maintain and troubleshoot.

As part of our fact-filled AWS Bootcamp series, Aviatrix CTO Sherry Wei reviews seven best-practice topics for Global Transit Network architecture.

Free Evaluation Checklist
In addition to the slides, you’ll also receive a handy spreadsheet-based checklist with 50 architecture and business goals to consider when evaluating solutions for your own Global Transit Network.

Who Should Watch?
Anyone responsible for connectivity of cloud resources, including cloud architects, cloud infrastructure managers, cloud engineers, and networking staff.

Public cloud providers like Amazon AWS enable software providers to build and offer software-as-a-service. These SaaS providers are often plagued by networking challenges owing to multi-tenant requirements, different connectivity types and strict security & compliance requirements. There has to be a simpler way to solve networking requirements for the cloud other than the legacy hardware-based networking solutions.

Join us in this webinar to hear from a cloud expert, Richard Weekes, Enterprise Analytics & Mobility Provider, Microstrategy, where he architected an elegant cloud networking solution to address the 4 common pitfalls for SaaS providers.

In this webinar, you will learn:

. The most common top 4 networking pitfalls in the cloud that hinders SaaS providers
. How to avoid these common pitfalls that are seen with the legacy hardware-based networking solution
. How Aviatrix overcomes the pitfalls with a software-only solution built natively in the cloud

RobertHalf automates Hybrid Cloud deployment on Amazon AWS with Aviatrix Hybrid Cloud eXtend (HCX) software to reduce the time to deploy virtual private cloud (VPC) resources from 3 weeks to 30minutes. Watch the video to learn how from the solution architects of RobertHalf.

Cloud migrations are happening everywhere but are ripe with project delays, complex and time-consuming hardware-based networking and a lack of cloud skills to make them really successful. Not to mention extending your cloud is just as challenging. What if you could set up and manage clouds in a few minutes and accelerate your cloud projects?

Join the discussion where you will hear from one of the most foremost authorities on cloud, Chris McDaniel, SVP & Chief Infrastructure Architect at Integnology, who helps enterprises with their cloud strategy and migration path.

In this webinar you will learn:

- Best practices of Fortune 500 companies for cloud migration, operations and DevOps in the cloud

- How to avoid the 3 most common pitfalls with cloud set up and ongoing cloud management

- Why enterprises are choosing Aviatrix to connect their cloud in minutes, accelerating their migration, reducing costs and making everything dramatically more simple and secure

“Traditionally, Enterprises deployed business critical applications in their private data centers. To leverage the scale, agility and cost efficiency offered by the public clouds, Enterprises are migrating the workloads to public clouds like - Amazon AWS, Microsoft Azure and Google Cloud Platform. Seamless access to critical workloads needs a hybrid cloud network that has datacenter extended to the public cloud”.

Hospitality leader, Hyatt Hotels shares the Aviatrix and Azure deployment case study. In this case study, Hyatt shares how they resolved hybrid cloud networking challenges with Aviatrix

GREE International Entertainment, Inc., a leading free-to-play mobile social gaming company, is using Aviatrix Enterprise Cloud-defined Networking software with Amazon Virtual Private Cloud (VPC) to accelerate game development and time to market.