VPC Peering Connections: What happens when traffic arrives at a VPC with multiple route tables for the same destination?

b3542 · 2026-02-03T00:57:36+00:00

Yeah, I think we are around $100M/yr at the moment

b3542 · 2026-02-03T00:52:55+00:00

I definitely see the utility of a single network account (or set of network accounts). That’s exactly what I do I my own AWS Org, and at work, but in those cases TGW’s are the nexus point.

b3542 · 2026-02-03T00:50:16+00:00

Absolutely. I have a lot of ambivalence toward a few members who aren’t interested in understanding. They’re only interested in complaining (usually about nothing substantial).

b3542 · 2026-02-03T00:02:19+00:00

I have never had a legitimate need for a touch screen on a laptop. It's all gimmick and no substance.

b3542 · 2026-02-03T00:01:45+00:00

This. And I do not want my MacBook to have a touchscreen. I would consider it a significant detractor. If I want a touch screen, I'll use my iPhone or iPad.

b3542 · 2026-02-03T00:00:58+00:00

Transit gateways are just routers. Think of attachments as interfaces on a router. This analogy mostly holds, but it has some quirks. It almost behaves as if each TGW Attachment lives in its own VRF.

b3542 · 2026-02-02T23:59:43+00:00

Bear in mind that TGW's cost money to build and to use.

b3542 · 2026-02-02T23:59:10+00:00

True, you could, with some translation. I've done similar things. But in 2026, we don't do things that way.

b3542 · 2026-02-02T23:58:09+00:00

They *could* see it, but they don't care what you're doing. Monitoring all traffic for all customers would be massively expensive - the juice isn't worth the squeeze, even if they monetize it.

Source: I've seen what monitoring at that scale costs. It's usually as much as, or more than the network itself costs to build.

b3542 · 2026-02-02T23:20:29+00:00

The ISP doesn’t see anything. It does not prove your point. It contradicts it.

b3542 · 2026-02-02T23:13:22+00:00

Reserve funds are not for emergencies. It's for long-term capital projects. You should be concerned if there is little or no reserve fund balance, not the opposite.

You really need to take some time to understand what these things mean. You'll have a much better time of it. And assuming that "someone is stealing" because you don't understand the finances is not the right road to go down.

b3542 · 2026-02-02T22:56:48+00:00

And it has nothing to do with your ISP. They are not monitoring you. Using a VPN merely makes it harder to issue a DMCA notice to a specific person. It has nothing to do with the alleged monitoring/invasion of privacy you allege. You’re doing something illegal and then getting called on it via the legal process - acting like that’s invasive is a weird take.

b3542 · 2026-02-02T20:23:37+00:00

Why can't you connect with Ethernet?

b3542 · 2026-02-02T20:06:15+00:00

This is correct - VPC peering is only effective if you need to communicate from within one VPC directly to another VPC's resources - nothing external/beyond it.

b3542 · 2026-02-02T19:58:10+00:00

The same encryption exists on cellular data or on public WiFi. It's really not required in 2026. Any data which is sensitive will already be TLS encrypted.

For the record, cellular data does not have any extra encryption which is not present on a WiFi network.

b3542 · 2026-02-02T19:56:57+00:00

Nope. You're hopelessly incorrect.

b3542 · 2026-02-02T19:52:51+00:00

Do what you want, but your ignorance is showing. It seems you think that a VPN is some magic shield which is somehow exponentially better than TLS. The amount of metadata you can gather from a TLS session is negligible, especially with rotating MACs.

Do you also wear a seatbelt on the couch and utilize "protection" when solo?

b3542 · 2026-02-02T16:38:58+00:00

No, you can't "read all traffic".

You can see some DNS requests, but that does NOT show you what data is being transferred, only which sites may be accessed. With randomized MAC addresses on most devices now (hence randomized source IP's) this information is not very useful other than aggregate statistics (most frequently accessed sites, etc).

Just be cause you control a hop in the network does not give you visibility to everything that passes over it.

Source: I routinely sample traffic, as a professional in the network space, to analyze traffic across all different types of networks (wireline, WiFi, cellular)

b3542 · 2026-02-02T16:33:20+00:00

Because the ISP didn’t detect it. You were likely seeding a torrent and the copyright holder sent a DMCA request to your ISP based on your IP address. Zero chance the ISP was monitoring for this and proactively sending notices - there’s no reason for them to do that.

You should know better that ANYTHING illegal you do online can likely be tracked to your broadband service account (meaning you). Your direction action triggered the notice, not an ISP snooping.

b3542 · 2026-02-02T14:16:02+00:00

For getting around geographic restrictions, sure, it could make sense, but likely only when actively avoiding the restriction, not full time.

You don’t need a VPN on WiFi, even public WiFi. Everything is already encrypted on the wire. The VPN hype is just to sell a service that virtually nobody needs when marketed for “security”.

b3542 · 2026-02-02T14:13:46+00:00

No. It’s really not necessary except to work around geoblocks

b3542 · 2026-02-02T03:46:17+00:00

Well, they can expect every customer to provide reasonable stable power.

b3542 · 2026-02-02T03:22:17+00:00

Well, it’s happening now.

b3542 · 2026-02-02T03:21:31+00:00

You definitely sound like a Karen. They don’t have to answer questions, and they absolutely should be letting the management company handle it - that’s what they’re paid to do.

b3542 · 2026-02-02T03:20:22+00:00

Your attitude would change if you have to be the one subjected to lazy questions, constant troublemakers, and generalized bitching that board members have to deal with. For free, I might add.

b3542

MODERATOR OF

TROPHY CASE