AWS and Azure regions and VPN support

AWS

Regions

Region name

Region code

Canada Central

ca-central-1

Canada West

ca-west-1

Northern California

us-west-1

Northern Virginia

us-east-1

Sao Paulo

sa-east-1

Ohio

us-east-2

Oregon

us-west-2

Sydney

ap-southeast-2

Singapore

ap-southeast-1

Mumbai

ap-south-1

Tokyo

ap-northeast-1

Seoul

ap-northeast-2

Ireland

eu-west-1

London

eu-west-2

Paris

eu-west-3

Frankfurt

eu-central-1

VPN support

In AWS we support AWS Site-to-Site VPN (IPSec) with Pre-shared key:

  • IKE versions: ikev1, ikev2

  • Inside tunnel IPv4 CIDR: a size /30 CIDR block from the 169.254.0.0/16 excluding 169.254.0.0/30, 169.254.1.0/30, 169.254.2.0/30, 169.254.3.0/30, 169.254.4.0/30, 169.254.5.0/30, 169.254.169.252/30

  • Phase 1 Diffie-Hellman (DH) group numbers: 2, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24

  • Phase 2 Diffie-Hellman (DH) group numbers: 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24

  • Phase 1 encryption algorithms: AES128, AES256, AES128-GCM-16, AES256-GCM-16

  • Phase 2 encryption algorithms: AES128, AES256, AES128-GCM-16, AES256-GCM-16

  • Phase 1 integrity algorithms: SHA1, SHA2-256, SHA2-384, SHA2-512

  • Phase 2 integrity algorithms: SHA1, SHA2-256, SHA2-384, SHA2-512

  • Phase 1 lifetime: 900 - 28800

  • Phase 2 lifetime: 900 – 3600

  • Pre-shared key (PSK): 8 – 64 characters and cannot start with zero (0)

Azure

Regions

Region name

Paired region

East US 2

Central US

West US 3

East US

East Asia

Southeast Asia

North Europe

West Europe

VPN support

In Azure we support Site-to-Site VPN (IPSec) with Pre-shared key:

  • IKE versions: ikev2

  • Phase 1 Diffie-Hellman (DH) group: DHGroup24, ECP384, ECP256, DHGroup14, DHGroup2048, DHGroup2, DHGroup1, None

  • Phase 2 Diffie-Hellman (DH) group numbers: PFS24, ECP384, ECP256, PFS2048, PFS2, PFS1, None

  • Phase 1 encryption algorithms: GCMAES256, GCMAES128, AES256, AES192, AES128

  • Phase 2 encryption algorithms: GCMAES256, GCMAES192, GCMAES128, AES256, AES192, AES128, DES3, DES, None

  • Phase 1 integrity algorithms: SHA384, SHA256, SHA1, MD5

  • Phase 2 integrity algorithms: GCMAES256, GCMAES192, GCMAES128, SHA256, SHA1, MD5

  • Phase 1 lifetime: 28800

  • Phase 2 lifetime: 300 – 27000