The challenge
Applications were moving to AWS while their dependencies stayed in on-premises data centers built on Cisco ACI. The two sides needed resilient, routed connectivity with the same segmentation rules on both, and cloud networking had to be repeatable instead of hand-built in the console.
What I did
- Designed the hybrid routing between AWS and the ACI fabric over Site-to-Site VPN and Direct Connect, with BGP and route filtering on both sides.
- Kept segmentation consistent: mapped on-premises VRFs and contracts to VPC routing and security groups.
- Wrote Terraform for VPCs, subnets, route tables, security groups and load balancers so environments are built the same way every time.
- Implemented AWS Application and Network Load Balancers for secure, scalable application delivery.
- Worked with DevOps, Cloud and Security teams to bring network changes into the CI/CD process.
Outcome
- Repeatable, reviewable network builds in AWS through infrastructure as code.
- Applications in AWS reach on-premises services over redundant paths with consistent policy.
- Faster and safer network changes through peer-reviewed code instead of manual console work.
Details are kept general on purpose – customer and internal specifics are confidential.