Next-Gen Transit Hub
The Problem

Networking a Growing Number of VPCs

VPC architecture and management is the foundation for your usage of AWS and other Public Clouds. It enables developers, lines of business, and CloudOps to scale and migrate workloads from on-prem sites. A Virtual Private Cloud (VPC) represents a virtual network that closely resembles a traditional datacenter network with these key differences:

  1. VPCs can be easily created in seconds
  2. Access is open to everything within a VPC unless locked down
  3. Other people in your organization may want and create their own networks

Given this, most organizations have a growing number of VPCs, posing challenges for connectivity, network security, and operational management. If you have more than 10 VPCs with on-prem site or multicloud connectivity requirements, the traditional point-to-point virtual router network can become a major source of pain. This includes the time and coordination to follow on-prem change control process required for each new VPC. What’s needed is a more automated infrastructure with better provisioning controls and tighter standards for routing.

The Aviatrix Solution

The Next-Generation Transit VPC Network

The Aviatrix Next-Gen Transit VPC Network provides a tried-and-true, AWS-recommended VPC architecture for multiple accounts, regions, and on-premise sites. An integrated Transit Wizard guides a cloud or network engineer through the build steps in less than an hour. Once built, the network is easily customized or extended to meet your organization’s requirements.
How we’re different

Software-Defined Cloud Networking

The Next-Generation Transit VPC Network is comprised of:

Global Transit Hub and Spoke VPCs and Shared Services VPCs

Purpose-built Connectivity

Traffic between any two Spoke VPCs is routed directly, rather than going through the Transit Hub as required by legacy vRouters such as the CSR-based solution. Only traffic to on-prem destinations traverse the Transit Hub VPC. Decoupling the different traffic streams reduces performance bottlenecks and removes single points of failure.


BGP is only deployed between the Transit Hub and the AWS VGW to propagate route updates from the on prem edge router into the cloud. The spoke VPCs are not required to run BGP, resulting in easier operations and troubleshooting by engineers.

Egress Charges are Cut in Half

VPC-to-VPC traffic does not go through the Transit Hub enabling cloud teams to reduce the AWS network egress charge by half.

Plus the following Next-Generation functionality:


Spoke VPCs are segmented by default with no connectivity to each other. Connectivity is built by design using AWS native direct peering (where available) or Aviatrix encrypted peering.


Cloud teams gain visibility over performance and link status across hybrid and multicloud environments from a single, unified console.


Built-in tools enable engineers to quickly identify root causes to connectivity problems and ensure faster remediation.

Remote User VPN

Optional remote user VPN secures access to AWS and public cloud environments using a single certificate, even when spread across multiple VPCs, networks, and cloud providers — greatly reducing user VPN management time.


Plugs into your modern cloud stack including SumoLogic, Splunk, Datadog, Pager Duty, remote syslog and many others.

Learn More

Have questions about Transit Network?

Ready to get started?

Choose your deployment model to build this networking use case on AWS in minutes.

Free 14-Day Trial – Cancel Anytime.

Cancel Anytime.

Free 14-Day Trial – Cancel Anytime.

Cancel Anytime.