Syllaro Academy

AWS Certified CloudOps Engineer - Associate

Troubleshooting Hybrid and Private Connectivity

A VPN tunnel that will not come up, a Direct Connect BGP session stuck in Active, an endpoint that resolves to the wrong address. This lesson gives you a bottom-up diagnostic order for hybrid links and the private connectivity failures that look like them.

Advanced 30 minutes 5 Learning Objectives
  1. Diagnose a hybrid link from the bottom layer up instead of starting at the routing layer
  2. Separate a Site-to-Site VPN Phase 1 failure from a Phase 2 failure from a BGP failure using tunnel state and VPN logs
  3. Work a Direct Connect problem through layer 1, layer 2, and layer 3 in order, using the CloudWatch metric for each
  4. Identify the routing-layer failures that leave a healthy link carrying no traffic, including missing route propagation and prefix limits
  5. Recognize the private connectivity failures caused by DNS, endpoint policies, and the absence of transitive routing