Skip to main content

Virtual private cloud (VPC) peering in Aiven

The VPC peering capability supported on the Aiven Platform improves network connectivity and security. It simplifies architecture, helps reduce network latency, and enhances resource sharing while maintaining isolation and control.

VPC peering is a networking connection between two VPCs. It allows private and direct communication between the VPCs with no traffic routing over the public internet.

VPC peering characteristics​

  • Private communication: Uses private IP addresses for direct communication between VPCs
  • High performance: Low latency thanks to traffic remaining on the cloud provider's network
  • Security: Reduces exposure to public networks without using internet gateways, VPNs, or NAT
  • Scalability: Supports connections across different accounts and regions, depending on a cloud provider

VPC peering use cases​

  • Multi-tier applications: Secure connection between VPCs hosting different application layers, such as web or database
  • Resource sharing: Secure sharing between VPCs hosting different resources, for example, datasets or APIs
  • Data isolation: Enforce access control by using separate VPCs for different projects or teams in an organization

How it works​

Aiven allows you to set up peering connections for project VPCs and for organization VPCs.

Aiven VPCs can be peered with VPCs in the following cloud platforms:

  • Google Cloud
  • Amazon Web Services
  • Microsoft Azure
  • UpCloud

Limitations​

  • Peering is only supported between an Aiven VPC and a VPC hosted with the same cloud provider. For example, an Aiven VPC hosted in AWS can be peered with an AWS VPC, but not with a VPC in Google Cloud, Microsoft Azure, or UpCloud. Peering across different cloud providers is not supported.
  • A single Aiven VPC can't be peered with VPCs in more than one cloud provider at the same time.

To connect to a service from a different cloud provider or region, use public access instead of VPC peering. This lets you reach a VPC-hosted service over the public internet, and you can restrict who connects with an IP allow list.

Learn more​

For information on VPC peering supported by a particular cloud provider, see the following: