Back to Details

connecting-vpcs-with-peering

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Connecting VPCs with Peering

通过VPC peering连接VPC

Overview

概述

Domain expertise for establishing private network connectivity between two VPCs using VPC peering. Covers the full lifecycle: creating the peering connection, accepting it, updating route tables in both VPCs, configuring DNS resolution, and adjusting security groups for cross-VPC traffic. Supports same-region, cross-region, and cross-account peering scenarios.
本技能具备使用VPC peering在两个VPC之间建立专用网络连通性的领域专业知识。涵盖完整生命周期：创建peering连接、接受连接、更新两个VPC中的路由表、配置DNS解析，以及调整安全组以支持跨VPC流量。支持同区域、跨区域和跨账户的peering场景。

Create a VPC peering connection

创建VPC peering连接

To establish a VPC peering connection between two VPCs, follow the procedure exactly. See VPC peering connection procedure.
The procedure requires the requester and accepter VPC IDs at minimum. It validates both VPCs exist, checks for CIDR overlap, creates and accepts the peering, updates all route tables, and configures DNS resolution.
要在两个VPC之间建立VPC peering连接，请严格遵循以下步骤。 查看VPC peering连接步骤。
该步骤至少需要请求方和接受方的VPC ID。它会验证两个VPC是否存在、检查CIDR重叠情况、创建并接受peering连接、更新所有路由表，并配置DNS解析。

Troubleshooting

故障排查

Peering stuck in pending state

Peering连接处于待处理状态

Cross-account connections require manual acceptance from the accepter account. Same-account connections with 
auto_accept: true
should transition automatically.
跨账户连接需要接受方账户手动接受。设置了
auto_accept: true
的同账户连接应自动完成状态转换。

Route creation fails

路由创建失败

Check for existing routes with the same destination CIDR. Replace existing routes instead of creating new ones.
检查是否存在具有相同目标CIDR的现有路由。请替换现有路由，而非创建新路由。

DNS resolution not working

DNS解析无法正常工作

Both VPCs must have DNS resolution and DNS hostnames enabled in their VPC settings, not just the peering connection options.
两个VPC都必须在其VPC设置中启用DNS解析和DNS主机名，而不仅仅是在peering连接选项中启用。

Cross-region connectivity issues

跨区域连通性问题

Verify routes are added in both regions and security groups allow traffic from the peer VPC's CIDR blocks.
确认两个区域都已添加路由，且安全组允许来自对等VPC的CIDR块的流量。