Planning the architecture

The following diagram shows the baseline architecture of edge VPC and application VPCs that are connected by AWS Transit Gateway. The VPCs can be part of the same or different accounts.

For example, a landing zone typically deploys a networking account that will control the edge VPCs. This architecture helps users leverage common policies, processes, and platforms across the application suite.

The following diagram shows two network interface (NIC) instances from an F5 BIG-IP workload deployed in an active standby cluster. You can add more elastic network interfaces to these systems, up to the instance limit. F5 recommends that you use a Multi-AZ pattern for your deployment to avoid Availability Zone failure.