Transit Gateway
Users can create the service by entering the required information for the Transit Gateway service and selecting detailed options through the Samsung Cloud Platform Console.
Create Transit Gateway
You can create and use the Transit Gateway service in the Samsung Cloud Platform Console.
To create a Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Create Transit Gateway button. 2. Go to the Transit Gateway creation page.
- In the Service Information Input area, enter or select the required information.
Category Required statusDetailed description Transit Gateway name Required Enter the Transit Gateway name - Enter using letters and numbers, 3 to 20 characters
Explanation Selection Enter description for Transit Gateway Table: Transit Gateway service information input fields - Additional Information Input area, please enter or select the required information.
Category required statusDetailed description tag Select Add Tag - Up to 50 per resource can be added
- After clicking the Add Tag button, enter or select Key, Value values
Table. Transit Gateway additional information input fields
- In the Service Information Input area, enter or select the required information.
- Summary Check the detailed information and estimated charges generated in the panel, and click the Create button.
- Once creation is complete, check the created resources on the Transit Gateway List page.
Check Transit Gateway Details
The Transit Gateway service lets you view and modify the complete resource list and detailed information. In the Transit Gateway Details page, it is composed of Details, Connected VPC Management, Rules, Tags, Activity History tabs.
To view the detailed information of the Transit Gateway, follow these steps.
- Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- On the Transit Gateway List page, click the resource to view its detailed information. 3. Go to the Transit Gateway Details page.
- Transit Gateway Details page displays status information and additional feature information, and consists of the Details, Connected VPC Management, Rules, Tags, Activity History tabs.
Category Detailed description status Transit Gateway status - Active: Running
- Creating: In progress
- Editing: In progress
- Deleting: In progress
- Error: An error occurred
Delete Transit Gateway Button to delete Transit Gateway resources Table. Transit Gateway status information and additional features
- Transit Gateway Details page displays status information and additional feature information, and consists of the Details, Connected VPC Management, Rules, Tags, Activity History tabs.
Detailed Information
On the Transit Gateway list page, you can view detailed information of the selected resource and, if necessary, edit the information.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource name | Transit Gateway resource name |
| Resource ID | Unique resource ID in the service |
| Constructor | User who created the Transit Gateway |
| Creation date and time | Transit Gateway creation time |
| Modifier | User who modified the Transit Gateway information |
| Modification date | Date and time the Transit Gateway information was modified |
| Transit Gateway name | Transit Gateway resource name |
| Use Uplink | Uplink information connected to the Transit Gateway
|
| Explanation | Description of the Transit Gateway
|
| Firewall connection status | Firewall connection management and status display
|
Connected VPC Management
Transit Gateway list page allows you to view the VPCs connected to the selected resource, and to add or delete them.
| Category | Detailed description |
|---|---|
| VPC list | Connected VPC list
|
Rule
On the Transit Gateway list page, you can view the rules attached to the selected resource, and add or delete them.
| Category | Detailed description |
|---|---|
| Rule List | Connected Rules List
|
Tag
On the Transit Gateway list page, you can view the tag information of the selected resource, and add, modify, or delete it.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
Transit Gateway list page allows you to view the operation history of the selected resource.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Manage Transit Gateway integration services
You can request, modify, and cancel the Uplink and Firewall connection services required to use the Transit Gateway service.
To request the Transit Gateway integration service, follow the steps below.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
- On the Transit Gateway Details page, click Linked Services (IGW, BM VPC), Quick Access to Line Request/Modification/Termination. 4. Navigate to the service request page.
- On the Service Request page, enter or select the required information in the mandatory input fields.
Input field Detailed description Title Enter the title of the service request - Example: TGW Uplink circuit request
Region Select the location of Samsung Cloud Platform - Automatically filled with the region corresponding to the Account
service Select service category and service - Service Category: Networking
- Service: Transit Gateway
Task classification Select the type you want to request - TGW Uplink line request/modification/termination: After selecting the work type, enter detailed information in the service request category field
content Fill in the detailed items of the service request form - Service request type: manually enter one of Apply / Modify / Terminate
- Account name/ID: Enter the account name and ID
- Transit Gateway name/ID: Enter the created Transit Gateway name and ID
- Applicant information: Enter applicant’s email, phone number, etc.
- Service request task type: Choose and enter either Uplink line connection or BM VPC Firewall connection
- Firewall usage: Enter whether the firewall is used
Attachment If you have additional files you want to share, proceed with the upload - Attached files can be up to 5 files, each within 5 MB
- Only doc, docx, xls, xlsx, ppt, ppts, hwp, txt, pdf, jpg, jpeg, png, gif, tif files can be attached
Table. Linked Service Creation Request Items - On the service request page, click the Request button.
- After the request is completed, check the submitted details on the Support Center > Service Request List page.
- When the service request operation is completed, you can view the requested resources on the Transit Gateway Details page.
VPC connection for BareMetal
- VPC Peering does not support firewalls.
- When you cannot use a Security Group, such as with BareMetal, you can configure VPC Peering using a Transit Gateway firewall.
- However, in a peered BM VPC, communication via UpLink (external) is not possible, and it cannot be connected to a Transit Gateway together with other VM VPCs.
Managing VPC connections of the Transit Gateway
You can add or remove VPCs on a Transit Gateway.
Add VPC connection
To add a VPC attachment to a Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- Transit Gateway List page, click the resource you want to delete. 3. Navigate to the Transit Gateway Details page.
- On the Transit Gateway Details page, click the Connected VPC Management tab. 4. Navigate to the Connected VPC Management tab page.
- On the Connected VPC Management tab page, click the Add VPC Connection button. 5. The VPC connection addition window appears.
- In the Add VPC Connection window, select the VPC and click the Confirm button. 6. A notification confirmation window appears.
- Click +New in the list to create a VPC and select it.
- In the alert confirmation dialog, click the Confirm button. 7. Check whether a resource entry has been added in the VPC connection list.
Delete VPC connection
To delete a Transit Gateway’s VPC attachment, follow these steps.
- Click the All Services > Networking > VPC menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
- On the Transit Gateway Details page, click the Connected VPC Management tab. 4. Navigate to the Connected VPC Management tab page.
- On the Connected VPC Management tab page, click the Delete button for the item you want to delete. 5. A notification confirmation window appears.
- In the alert dialog, click the Confirm button. 6. Verify whether the selected resource has been deleted from the VPC connection list.
Managing Transit Gateway rules
You can add or delete rules in the Transit Gateway.
Add rule
- You can add rules only when the Transit Gateway service status is Active.
- If the destination IP is entered incorrectly in the routing configuration, communication failures may occur. * Please double-check the destination IP information before creating the rule.
Transit Gateway must complete both routing rule registration and firewall rule registration to operate correctly.
- Register routing rule
- Rule 1: Register VPC - Transit Gateway rule
- Rule 2: VPC - Uplink rule registration (when connecting Uplink line)
- Register firewall rule
- Add a Transit Gateway firewall and add the firewall purpose (e.g., TGW Uplink, TGW BM VPC, etc.).
Next, select the firewall from the firewall product list and register the rule. (When adding a firewall purpose, default set to All/deny)
- Add a Transit Gateway firewall and add the firewall purpose (e.g., TGW Uplink, TGW BM VPC, etc.).
To add a rule to the Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- Transit Gateway List page, click the resource you want to delete. 3. Transit Gateway Details Navigate to the page.
- On the Transit Gateway Details page, click the Rules tab. 4. Go to the Rules tab page.
- On the Rule tab page, click the Add Rule button. 5. The rule addition window appears.
- In the rule addition window, enter the origin and destination, and click the Confirm button. 6. A notification confirmation dialog appears.
Category Detailed description Rule type Select type for adding Transit Gateway rule - Select from VPC-TGW rule, TGW-Uplink rule
Connected VPC name Select the connected VPC when choosing a VPC‑TGW rule origin When selecting a VPC‑TGW rule, the destination is automatically selected when configured. Destination Select rule destination - When selecting a VPC‑TGW rule, set to either VPC or TGW
- When selecting a TGW‑Uplink rule, set to either TGW or remote
- Cannot register if it duplicates an existing rule; can input up to the x.x.x.x/28 range
Destination IP range Enter the destination IP range to use Table. Rule addition input itemsCaution- VPC-TGW rule When entering, check the following items.
- When the destination is a VPC.
- It can be entered within the VPC IP range.
- It should be entered the same as the subnet range.
- 0.0.0.0/0 cannot be used as the destination IP range.
- When the destination is a Transit Gateway.
- Some IP ranges are reserved for management and cannot be used.
- The VPC IP address range cannot be entered.
- The destination IP range 0.0.0.0/0 can be entered only when the VPC’s Internet Gateway is not attached.
- When the destination is a VPC.
- TGW-Uplink Rule When entering, check the following items.
- When the destination is a Transit Gateway.
- You can enter values within the VPC IP address range connected to the Transit Gateway.
- 0.0.0.0/0 cannot be used as the destination IP range.
- When the destination is remote
- You cannot enter the VPC IP address range connected to the Transit Gateway.
- The destination IP range 0.0.0.0/0 can be entered only when the Transit Gateway does not have an Internet Gateway attached.
- D, E class IP ranges cannot be entered.
- When the destination is a Transit Gateway.
- In the alert dialog, click the Confirm button. 7. Check whether a resource entry has been added in the rule list.
Delete rule
- You can delete the rule only when the Transit Gateway service status is Active.
- If the rule status is Creating or Deleting, the rule cannot be deleted.
To delete a Transit Gateway rule, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Navigate to the Transit Gateway List page.
- On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
- On the Transit Gateway Details page, click the Rules tab. 4. Navigate to the Rules tab page.
- On the Rules tab page, click the Delete button of the item you want to delete. 5. A notification confirmation window appears.
- In the alert dialog, click the Confirm button. 6. Verify that the selected resource has been deleted from the rule list.
Managing Firewall Connections
You can attach or detach a firewall for use with the Transit Gateway.
Connect to Firewall
To add a Firewall connection to the Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- Transit Gateway List page, click the resource to which you will connect the Firewall. 3. Go to the Transit Gateway Details page.
- On the Transit Gateway Details page, click the Details tab. 4. Go to the Detailed Information tab page.
- On the Detailed Information tab page, click the Connect Firewall button. 5. A firewall connection confirmation window appears.
- In the Firewall connection confirmation window, click the Confirm button. 6. Check the connection status in the Firewall connection status item.
Add Firewall
After the Firwall connection is completed, you can add a Firewall.
To add a Firewall to a Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- Transit Gateway List page, click the resource where you want to add a Firewall. 3. Navigate to the Transit Gateway Details page.
- On the Transit Gateway Details page, click the Detailed Information tab. 4. Go to the Detailed Information tab page.
- On the Detailed Information tab page, click the Add button in the Firewall list. 5. The Firewall addition window appears.
- In the Firewall add dialog, select the purpose and click the Confirm button. 6. Check whether a resource item has been added to the Firewall list.
Delete Firewall
You can delete the firewall after the firewall connection is completed.
To delete a firewall from a Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- On the Transit Gateway List page, click the resource to delete the firewall. 3. Go to the Transit Gateway Details page.
- On the Transit Gateway Details page, click the Details tab. 4. Go to the Detailed Information tab page.
- Click the Delete button on the Detailed Information tab page of the Firewall list. 5. A notification confirmation window appears.
- In the alert dialog, click the Confirm button. 6. Check whether the resource entry has been removed from the Firewall list.
Disconnect Firewall
You can disconnect unused Firewall connections.
To detach the firewall from the Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- Transit Gateway list page, click the resource to detach the Firewall connection. 3. Navigate to the Transit Gateway Details page.
- On the Transit Gateway Details page, click the Details tab. 4. Navigate to the Detailed Information tab page.
- On the Detailed Information tab page, click the Disconnect Firewall button. 5. A notification confirmation window appears.
- In the alert dialog, click the Confirm button. 6. Check the disconnected status in the Firewall connection status item.
Terminate Transit Gateway
You can terminate unused Transit Gateways to reduce operating costs.
- You cannot terminate the service if the uplink connected to the Transit Gateway is in use or if a firewall is connected. * After completing the termination request for the connected resource, cancel the service.
- If VPC resources or rules are attached to the Transit Gateway, the service cannot be terminated. * Delete all linked resources and rules, then terminate the service.
- If the Transit Gateway service status is Creating or Deleting, the service cannot be terminated.
To terminate the Transit Gateway, follow these steps.
- All Services > Networking > VPC Click the menu. 1. Navigate to the VPC’s Service Home page.
- On the Service Home page, click the Transit Gateway menu. 2. Go to the Transit Gateway List page.
- On the Transit Gateway List page, click the resource you want to delete. 3. Go to the Transit Gateway Details page.
- On the Transit Gateway Detail page, click the Transit Gateway Delete button.
- After termination is complete, check whether the resource has been deleted from the Transit Gateway list.
Preliminary service
This is a service that must be installed in advance before creating this service. Please prepare by referring to the user guide provided in advance.
| Service Category | service | Detailed description |
|---|---|---|
| Networking | VPC | It is a service that provides an isolated virtual network in a cloud environment. |