Building a VPN Between Google Cloud and AWS with Terraform

admin

2 years ago

“Building a VPN Between Google Cloud and AWS with Terraform”

Daftar Isi

Toggle

Deployment Architecture

Persiapan

Perisapan Penggunaan GCP

Masuk ke GCP
clone multivpn

git clone https://github.com/GoogleCloudPlatform/autonetdeploy-multicloudvpn.git

Masuk ke folder

cd autonetdeploy-multicloudvpn

Perisapan Penggunaan AWS

login ke dashboard AWS
Masuk ke menu Services > Compute > EC2
Pastikan ada di region us-west-1 ( california )

Buat access credentials ( GCP )

Masuk ke menu > click IAM & Admin > Service Accounts.
Klik Compute Engine default service account > klik 3 titik vertikal > di bawah Actions dan select Manage keys, dan click ADD KEY > Create new key

Pilih JSON > klik Create
Lalu file json akan terdownlod
Pastikan di dalam cloud shell masih berada di folder autonetdeploy-multicloudvpn
Klik titik 3

Klik Upload

Kemudian Upload JSON

Jalankan perintah berikut

./gcp_set_credentials.sh ~/[PROJECT_ID]-[UNIQUE_ID].json

Buat AWS access credentials

Masih di dashboard GCP
Buat credential directory

export username=`whoami`
mkdir /home/$username/.aws/
touch /home/$username/.aws/credentials_autonetdeploy

Edit credential file

nano /home/$username/.aws/credentials_autonetdeploy

Tambahkan file berikut

[default]
aws_access_key_id=<Your AWS Access Key>
aws_secret_access_key=<Your AWS Secret Key>

ganti AWS key dan AWS secret yang anda miliki

Misal setelah di masukan seperti berikut

cat /home/$username/.aws/credentials_autonetdeploy

[default]
aws_access_key_id=AKIA3INBXVI72ZO2Z4F4
aws_secret_access_key=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

Setting terraform envi

export TF_VAR_aws_credentials_file_path=/home/$username/.aws/credentials_autonetdeploy

Setting Project

Setting project di GCP

export PROJECT_ID=$(gcloud config get-value project)
gcloud config set project $PROJECT_ID

Gunakan script yang sudah tersedia

./gcp_set_project.sh

Jalankan terraform initial

cd terraform
terraform init

Plan

terraform plan

Gunakan SSH keys untuk Koneksi ke VM instances

Masih di GCP cloud shell -> generate new keypair -> Enter

ssh-keygen -t rsa -f ~/.ssh/vm-ssh-key -C $username

ubah permission

chmod 400 ~/.ssh/vm-ssh-key

Import public key ke Google Cloud

gcloud compute config-ssh --ssh-key-file=~/.ssh/vm-ssh-key

Buka menu Compute Engine > Metadata

Klik SSH Key
nanti muncul seperti berikut

Nanti key ini akan di import ke AWS

Import public key dari GCp ke AWS

Login ke AWS Management Console
Buka Services > Compute > EC2
Pastikan ada di Region us-west-1 ( California)
Scrol ke menu Network & Security -> pilih Key Pairs
Klik Actions > Import Key Pair
Tambahkan nama vm-ssh-key
Masukan key yang dari GCP

Kemudian klik Import key pair

Deploying VPC networks, VM instances, VPN gateways, dan IPsec tunnels

Dari script yang sudah di clone , berikut yang akan di deploy

Deploy dengan Terraform

Masuk ke cloud shell GCP
Ubah directory

cd ~/autonetdeploy-multicloudvpn/terraform

kemudian validate

terraform validate

plan

terraform plan

apply -> yes

terraform apply

Tunggu proses nya karena proses ini akan membuat 30+ resources untuk mu, including GCP danAWS VPC networks, VM instances, VPN gateways, and IPsec tunnels.

Vm di GCP

Vm di AWS

Untuk melihat IP external di GCP dan AWS

terraform output

aws_instance_external_ip = [AWS_EXTERNAL_IP]
aws_instance_internal_ip = 172.16.0.100
gcp_instance_external_ip = [GCP_EXTERNAL_IP]
gcp_instance_internal_ip = 10.240.0.100

Penutup

Sahabat Blog Learning & Doing demikianlah penjelasan mengenai Building a VPN Between Google Cloud and AWS with Terraform . Semoga Bermanfaat . Sampai ketemu lagi di postingan berikut nya.