---
title: "AWS and Azure regions and VPN support"
slug: "aws-and-azure-regions-and-vpn-support"
updated: 2024-10-07T14:15:02Z
published: 2024-10-07T14:15:02Z
canonical: "support.lusid.com/aws-and-azure-regions-and-vpn-support"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://support.lusid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# AWS and Azure regions and VPN support

## AWS

### Regions

| Region name | Region code |
| --- | --- |
| Canada Central | `ca-central-1` |
| Canada West | `ca-west-1` |
| Northern California | `us-west-1` |
| Northern Virginia | `us-east-1` |
| Sao Paulo | `sa-east-1` |
| Ohio | `us-east-2` |
| Oregon | `us-west-2` |
| Sydney | `ap-southeast-2` |
| Singapore | `ap-southeast-1` |
| Mumbai | `ap-south-1` |
| Tokyo | `ap-northeast-1` |
| Seoul | `ap-northeast-2` |
| Ireland | `eu-west-1` |
| London | `eu-west-2` |
| Paris | `eu-west-3` |
| Frankfurt | `eu-central-1` |

### VPN support

In AWS we support [AWS Site-to-Site VPN](https://docs.aws.amazon.com/vpn/latest/s2svpn/VPNTunnels.html)) (IPSec) with Pre-shared key:

- IKE versions: ikev1, ikev2
- Inside tunnel IPv4 CIDR: a size /30 CIDR block from the 169.254.0.0/16 excluding 169.254.0.0/30, 169.254.1.0/30, 169.254.2.0/30, 169.254.3.0/30, 169.254.4.0/30, 169.254.5.0/30, 169.254.169.252/30
- Phase 1 Diffie-Hellman (DH) group numbers: 2, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24
- Phase 2 Diffie-Hellman (DH) group numbers: 2, 5, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24
- Phase 1 encryption algorithms: AES128, AES256, AES128-GCM-16, AES256-GCM-16
- Phase 2 encryption algorithms: AES128, AES256, AES128-GCM-16, AES256-GCM-16
- Phase 1 integrity algorithms: SHA1, SHA2-256, SHA2-384, SHA2-512
- Phase 2 integrity algorithms: SHA1, SHA2-256, SHA2-384, SHA2-512
- Phase 1 lifetime: 900 - 28800
- Phase 2 lifetime: 900 – 3600
- Pre-shared key (PSK): 8 – 64 characters and cannot start with zero (0)

## Azure

### Regions

| Region name | Paired region |
| --- | --- |
| East US 2 | Central US |
| West US 3 | East US |
| East Asia | Southeast Asia |
| North Europe | West Europe |

### VPN support

In Azure we support Site-to-Site VPN (IPSec) with Pre-shared key:

- IKE versions: ikev2
- Phase 1 Diffie-Hellman (DH) group: DHGroup24, ECP384, ECP256, DHGroup14, DHGroup2048, DHGroup2, DHGroup1, None
- Phase 2 Diffie-Hellman (DH) group numbers: PFS24, ECP384, ECP256, PFS2048, PFS2, PFS1, None
- Phase 1 encryption algorithms: GCMAES256, GCMAES128, AES256, AES192, AES128
- Phase 2 encryption algorithms: GCMAES256, GCMAES192, GCMAES128, AES256, AES192, AES128, DES3, DES, None
- Phase 1 integrity algorithms: SHA384, SHA256, SHA1, MD5
- Phase 2 integrity algorithms: GCMAES256, GCMAES192, GCMAES128, SHA256, SHA1, MD5
- Phase 1 lifetime: 28800
- Phase 2 lifetime: 300 – 27000