|
| 1 | +--- |
| 2 | +meta: |
| 3 | + title: Configuring an InterLink |
| 4 | + description: Find out how to set up your Scaleway InterLink so that traffic can flow between your external infrastructure and your Scaleway resources. Understand how to attach a VPC, create an allowed routes list to whitelist route announcements, and activate route propagation across the connection. |
| 5 | + noindex: true |
| 6 | +content: |
| 7 | + h1: Configuring an InterLink |
| 8 | + paragraph: Find out how to set up your Scaleway InterLink so that traffic can flow between your external infrastructure and your Scaleway resources. Understand how to attach a VPC, create an allowed routes list to whitelist route announcements, and activate route propagation across the connection. |
| 9 | +tags: interlink configuration attach-vpc whitelist route-range ip-prefix route-propagation |
| 10 | +categories: |
| 11 | + - interlink |
| 12 | + - network |
| 13 | +dates: |
| 14 | + validation: 2024-10-24 |
| 15 | + posted: 2024-10-24 |
| 16 | +--- |
| 17 | + |
| 18 | +<Message type="important"> |
| 19 | +InterLink is currently in [Private Beta](https://www.scaleway.com/en/betas/), and only available to selected testers. |
| 20 | +</Message> |
| 21 | + |
| 22 | +Once your InterLink has been created and the [provisioning process](/network/interlink/reference-content/provisioning/) is complete, you must complete a number of configuration steps to enable traffic to flow across the InterLink. |
| 23 | + |
| 24 | +This document explains the process in full, and gives tips for troubleshooting any potential issues. |
| 25 | + |
| 26 | +## Configuration overview |
| 27 | + |
| 28 | +<Lightbox src="scaleway-interlink-config.webp" alt="A four step flow chart shows the following steps: 1. Create InterLink, 2. Attach VPC, 3. Attach allowed routes list, 4. Activate route propagation. After these steps are complete, traffic can flow across the InterLink" /> |
| 29 | + |
| 30 | +The diagram above shows the four configuration steps necessary for an InterLink. Only when all steps have been completed can traffic flow across the InterLink, connecting the Scaleway VPC to the external (on-premises) infrastructure. |
| 31 | + |
| 32 | +Read more about each step, and possible errors at each stage, in the following sections. |
| 33 | + |
| 34 | +### 1. Create the InterLink |
| 35 | + |
| 36 | +Creating an InterLink is itself a multi-step process, that requires action on both the Scaleway side, and on the partner side. This process is explained in full in [Provisioning an InterLink](/network/interlink/reference-content/provisioning/). |
| 37 | + |
| 38 | +You must wait until the InterLink has reached `Active` [status](/network/interlink/reference-content/statuses/) before you can continue with the following configuration steps. |
| 39 | + |
| 40 | +### 2. Attach VPC |
| 41 | + |
| 42 | +Attaching an InterLink to a VPC allows you to complete the connection from your external infrastructure, across the InterLink, to the Scaleway resources in the selected VPC. |
| 43 | + |
| 44 | +The VPC must be in the same region as the InterLink. An InterLink can only be attached to one VPC at a time, but you are free to detach the VPC and attach a different one whenever you like. |
| 45 | + |
| 46 | +You can use the [Attach a VPC](https://www.scaleway.com/en/developers/api/interlink/#path-links-attach-a-vpc) endpoint to attach a VPC to a given InterLink. |
| 47 | + |
| 48 | +### 3. Attach allowed routes list (routing policy) |
| 49 | + |
| 50 | +InterLink uses [**B**order **G**ateway **P**rotocol](https://en.wikipedia.org/wiki/Border_Gateway_Protocol) to exchange routing information between the customer’s infrastructure and the Scaleway VPC. Each side advertises IP prefixes for its own internal subnets and resources, to allow the other side to dynamically learn and update its internal routes, facilitating efficient traffic flow. However, by default, **all routes across an InterLink are blocked** . You must create and attach an [allowed routes list](/network/interlink/concepts/#allowed-routes-list) aka routing policy, to set IP prefix filters for the route advertisements you want to whitelist. This facilitates traffic flow across the InterLink. |
| 51 | + |
| 52 | +You can [create](https://www.scaleway.com/en/developers/api/interlink/#path-routing-policies-create-a-routing-policy) and [attach](https://www.scaleway.com/en/developers/api/interlink/#path-links-attach-a-routing-policy) allowed routes lists via the API. |
| 53 | + |
| 54 | +When setting the route ranges to whitelist, you must separately define the IP prefixes to accept from the external infrastructure (incoming ranges of route announcements to accept), and the IP prefix filters to advertise from the Scaleway VPC to the peer (outgoing ranges of routes to advertise). For example, adding `172.16.4.0/22` whitelists all 1,024 IPs in this block, from `172.16.4.0` to `172.16.7.255`. |
| 55 | + |
| 56 | +Only one allowed routes list (routing policy) can be attached to an InterLink at a given time. However, you can reuse the same list by attaching it to multiple InterLinks, for example if you have a second InterLink attached to the same VPC/external infrastructure for redundance purposes. You can update, delete or reattach a list at any time. |
| 57 | + |
| 58 | +### 4. Activate route propagation. |
| 59 | + |
| 60 | +Once you have attached a VPC and defined the routing policy/allowed routes, you must [activate route propagation](https://www.scaleway.com/en/developers/api/interlink/#path-links-enable-route-propagation) to allow traffic to flow over the InterLink. This enables all prefixes whitelisted in your allowed routes list / routing policy to be announced in the BGP session, so that traffic can flow along these routes. |
| 61 | + |
| 62 | +<Message type="important"> |
| 63 | +Even when route propagation is activated, remember that all routes are blocked by default. It is essential to attach a routing policy (aka [allowed routes list](/network/interlink/concepts/#allowed-routes-list) to the InterLink to allow traffic to flow. |
| 64 | +</Message> |
| 65 | + |
| 66 | +You can deactivate route propagation via the dedicated endpoint at any time. When you do this, all routes are blocked and removed from the VPC's route table. No traffic can flow across the InterLink until route propagation is reactivated. |
0 commit comments