hybrid-cloud-networking

Configure VPN and dedicated connections between on-premises infrastructure and cloud providers.

Updated Apr 23, 2026
One-click install
npx skills add https://github.com/SanketAdlak/PDMProjectDesign --skill hybrid-cloud-networking-sanketadlak
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: hybrid-cloud-networking
Source: https://github.com/SanketAdlak/PDMProjectDesign/tree/main/.agents/skills/hybrid-cloud-networking
Command: npx skills add https://github.com/SanketAdlak/PDMProjectDesign --skill hybrid-cloud-networking-sanketadlak

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Connecting on-premises data centers to cloud platforms requires choosing between VPN and dedicated circuits, configuring BGP routing, and ensuring redundancy across AWS, Azure, GCP, and OCI, which is error-prone without structured guidance. ## Core Features & Use Cases - Multi-Cloud Connectivity Options: Terraform examples and guidance for AWS Site-to-Site VPN and Direct Connect, Azure VPN Gateway and ExpressRoute, GCP Cloud VPN and Interconnect, and OCI IPSec VPN and FastConnect. - Hybrid Network Patterns: Reference architectures for hub-and-spoke, multi-region, and multi-cloud hybrid topologies with BGP routing configuration. - HA, Security, and Cost Guidance: Dual-tunnel failover, active-active ECMP routing, encryption best practices, monitoring commands, and cost optimization strategies. - Use Case: An enterprise migrating workloads gradually to AWS and Azure uses this Skill to provision redundant VPN tunnels with BGP failover, then upgrades to Direct Connect and ExpressRoute for production traffic. ## Quick Start Help me set up a redundant site-to-site VPN connection between my on-premises data center and AWS with BGP routing.

Frequently Asked Questions about hybrid-cloud-networking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I connect on-premises network to AWS with VPN?

Create an AWS Site-to-Site VPN by provisioning a virtual private gateway attached to your VPC, a customer gateway with your on-premises public IP and BGP ASN, and an IPSec VPN connection. Terraform resources like aws_vpn_gateway, aws_customer_gateway, and aws_vpn_connection automate this setup.

AWS Direct Connect vs Site-to-Site VPN which should I use?

Site-to-Site VPN runs over the internet at up to 1.25 Gbps per tunnel and suits moderate bandwidth at lower cost. Direct Connect provides dedicated 1-100 Gbps connections with lower latency and consistent bandwidth, but costs more and requires setup time.

Does Azure ExpressRoute support private connectivity to VNets?

Yes, Azure ExpressRoute provides private connectivity to VNets through a connectivity provider, bypassing the public internet. It supports up to 100 Gbps with low latency and offers a premium tier for global connectivity.

How do I make hybrid cloud VPN connections highly available?

Deploy dual VPN tunnels to separate customer gateways and use BGP for automatic failover. For higher availability, configure active-active setups with multiple connections from different locations and equal-cost multi-path routing.

What BGP ASN should I use for cloud VPN connections?

Use a private ASN such as 65000 for your on-premises router. Cloud-side defaults include 64512 for AWS and 65515 for Azure, while GCP and OCI assign provider-side values. Advertise your on-premises CIDRs and accept cloud VPC or VNet routes.