Create a Compute Bridge
You can create a bridge between one of your VPC (Virtual Private Cloud) and another VPC so that they can communicate with each other.
This action sends a request from one of your VPC to connect to another VPC.
Each VPC must contain at least one VM (Virtual Machine) before the bridge is created.
- If both VPC belong to your account, the request is automatically accepted.
- The CIDR blocks of the peer VPC must not overlap. Otherwise, the connection automatically fails and moves to the
failedstate. - The connection between two VPC works in both directions. Therefore, a connection from B to A is not required if a connection from A to B has already been established.
Permissions
This action requires the following IAM (Identity and Access Management) permissions:
- connectivity.bridge.create
Configuration required for the Compute Bridge to work
You must configure your VPC to allow traffic to and from its bridge. This includes configuring the route table, and updating the rules of the security groups.
Route Table configuration
In the route tables associated with the subnets of each VPC, create a route with the bridge CIDR (Classless Inter-Domain Routing) block as the destination, and the bridge ID as the target.
We recommend that you wait for the bridge to become active before creating a route.
Security Group configuration associated with the VM of your VPC
In each VPC connected by a bridge, add the following rules:
- One or more rules allowing inbound traffic from one or more security groups of the second VPC connected through the bridge.
- One or more rules allowing outbound traffic to one or more security groups of the second VPC connected through the bridge.
Your bridge is configured, and the VPC can communicate over a private connection.
- API
- Terraform
Before you start, make sure you have the ID of the VPC between which you want to establish a bridge.
The POST /connectivity/spaces/{spaceId}/computeBridges command requests a bridge between a source VPC and a destination VPC.
The Terraform documentation is available on the Numspot registry ↗.