architecting-networks

Name: architecting-networks
Availability: InStock
Author: MaserMediaGroup

Design cloud network architectures with VPC patterns, subnet strategies, and hybrid connectivity.

1|Updated Feb 24, 2026

Search Tags:#aws #terraform #zero trust #vpc #cidr #network architecture #hybrid connectivity

Ready to run

npx skills add https://github.com/masermediagroup-stack/maser-media --skill architecting-networks-masermediagroup-stack

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: architecting-networks
Source: https://github.com/masermediagroup-stack/maser-media/tree/main/.cursor/skills/community/ai-design-components/skills/architecting-networks
Command: npx skills add https://github.com/masermediagroup-stack/maser-media --skill architecting-networks-masermediagroup-stack

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Designing secure, scalable cloud networks requires choosing between VPC topology patterns, planning non-overlapping CIDR blocks, configuring security controls, and estimating costs across AWS, GCP, and Azure, which is error-prone without structured guidance. ## Core Features & Use Cases - VPC Pattern Selection: Decision frameworks for flat, multi-VPC, hub-and-spoke, full mesh, and hybrid architectures with tradeoff analysis. - Subnet and CIDR Planning: Three-tier subnet design, multi-AZ distribution, IPAM strategies, and a CIDR calculator script for IP allocation. - Security and Zero Trust: Security group microsegmentation patterns, Network ACL guidance, VPC Flow Logs monitoring, and identity-based access controls. - Use Case: When migrating from a flat network to a hub-and-spoke architecture with Transit Gateway and Direct Connect, use this Skill to select the pattern, plan CIDR ranges, and generate Terraform configurations. ## Quick Start Design a hub-and-spoke VPC architecture for three environments on AWS with CIDR planning and Terraform output.

Frequently Asked Questions about architecting-networks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I choose between VPC peering and Transit Gateway?▼

Use VPC peering for 2-5 VPCs needing low-latency direct communication without centralized inspection. Choose Transit Gateway when connecting 5 or more VPCs, requiring centralized security inspection, or needing hybrid connectivity to on-premises networks.

How do I plan CIDR blocks for AWS VPC subnets?▼

Allocate non-overlapping CIDR ranges across VPCs, size subnets by workload (public /26, private /20, database /24), and reserve 20-30% address space for growth. The included cidr-calculator.py script computes usable IPs and splits CIDR blocks into subnets.

Does this skill support GCP and Azure networking?▼

Yes, it covers unified networking concepts across AWS, GCP, and Azure, including GCP custom mode VPCs with Cloud NAT and Azure hub-and-spoke VNets with Network Security Groups. Reference docs map equivalent services like PrivateLink, Private Service Connect, and Private Link.

When should I use Direct Connect instead of VPN?▼

Use Direct Connect for production workloads needing consistent low latency, throughput above 1.25 Gbps, or data transfers exceeding roughly 8 TB per month where it becomes cheaper than VPN. VPN suits dev/test environments, backup connectivity, and quick setups.

How do I reduce NAT Gateway costs in AWS?▼

Use free Gateway VPC Endpoints for S3 and DynamoDB to bypass NAT data processing charges, deploy a single NAT Gateway for dev/test environments, and consider a centralized egress VPC pattern in hub-and-spoke topologies.