You can configure an active-active cluster with Amazon RDS for MySQL DB instances in more than one VPC. The VPCs can be in the same AWS Region or different AWS Regions.
Note
Sending traffic between multiple AWS Regions might incur additional costs. For more information,
see Overview of Data Transfer Costs for Common Architectures
If you are configuring an active-active cluster in a single VPC, you can skip these steps and move on to Setting up an active-active cluster with new DB instances.
To prepare for an active-active cluster with DB instances in more than one VPC
-
Make sure the IPv4 address ranges in the CIDR blocks meet the following requirements:
-
The IPv4 address ranges in the CIDR blocks of the VPCs can't overlap.
-
All of the IPv4 address ranges in the CIDR blocks either must be lower than
128.0.0.0/or higher than 128.0.0.0/subnet_masksubnet_mask.
The following ranges illustrate these requirements:
-
10.1.0.0/16in one VPC and10.2.0.0/16in the other VPC is supported. -
172.1.0.0/16in one VPC and172.2.0.0/16in the other VPC is supported. -
10.1.0.0/16in one VPC and10.1.0.0/16in the other VPC is not supported because the ranges overlap. -
10.1.0.0/16in one VPC and172.1.0.0/16in the other VPC is not supported because one is below128.0.0.0/and the other is abovesubnet_mask128.0.0.0/.subnet_mask
For information about CIDR blocks, see VPC CIDR blocks in the Amazon VPC User Guide.
-
-
In each VPC, make sure DNS resolution and DNS hostnames are both enabled.
For instructions, see View and update DNS attributes for your VPC in the Amazon VPC User Guide.
-
Configure the VPCs so that you can route traffic between them in one of the following ways:
-
Create a VPC peering connection between the VPCs.
For instructions, see Create a VPC peering connection in the Amazon VPC Peering Guide. In each VPC, make sure there are inbound rules for your security groups that reference security groups in the peered VPC. Doing so allows traffic to flow to and from instances that are associated with the referenced security group in the peered VPC. For instructions, see Update your security groups to reference peer security groups in the Amazon VPC Peering Guide.
-
Create a transit gateway between the VPCs.
For instructions, see Getting started with transit gateways in Amazon VPC Transit Gateways. In each VPC, make sure there are inbound rules for your security groups that allow traffic from the other VPC, such as inbound rules that specify the CIDR of the other VPC. Doing so allows traffic to flow to and from instances that are associated with the referenced security group in the active-active cluster. For more information, see Control traffic to your AWS resources using security groups in the Amazon VPC User Guide.
-
