AWS directconnect medium security documentation change
Summary
Replaced prefix pool size documentation with clarified BGP session route limits and consequences of exceeding them
Security assessment
Documented specific security-related consequence (BGP session going DOWN) for exceeding route limits, which can cause service disruption. Added guidance to contact AWS support for exceeding limits.
Diff
diff --git a/directconnect/latest/UserGuide/limits.md b/directconnect/latest/UserGuide/limits.md index 6b3b5d7dc..2f805384f 100644 --- a//directconnect/latest/UserGuide/limits.md +++ b//directconnect/latest/UserGuide/limits.md @@ -21,6 +21 @@ Number of virtual interfaces per Link Aggregation Group (LAG) | 51 | When AWS Di -Inbound route prefixes per BGP session on a private or transit virtual interface. If you advertise more prefixes than the allocated count for IPv4 or IPv6, the BGP session goes into an idle state (BGP DOWN). The default allocation is 100 each for IPv4 and IPv6. You can increase this using inbound prefix controls. | 100 each for IPv4 and IPv6 | Default: 100 each for IPv4 and IPv6. You can allocate up to 1,000 per VIF using inbound prefix controls. For more information, see [Inbound prefix controls](./prefix-controls.html). -Prefix pool size per 1 Gbps or 10 Gbps dedicated connection | 5,000 (IPv4), 5,000 (IPv6) | This quota cannot be increased. -Prefix pool size per 100 Gbps dedicated connection | 30,000 (IPv4), 30,000 (IPv6) | This quota cannot be increased. -Prefix pool size per 400 Gbps dedicated connection | 50,000 (IPv4), 50,000 (IPv6) | This quota cannot be increased. -Maximum prefix allocation per private or transit virtual interface | 1,000 (IPv4), 1,000 (IPv6) | Contact your SA or TAM for further assistance. -Total prefix pool allocations per Direct Connect gateway | 10,000 (combined IPv4 + IPv6) | This quota cannot be increased. +Routes per Border Gateway Protocol (BGP) session on a private virtual interface or transit virtual interface from on-premises to AWS. If you advertise more than 100 routes each for IPv4 and IPv6 over the BGP session, the BGP session will go into an idle state with the BGP session DOWN. | 100 each for IPv4 and IPv6 | Contact your Solutions Architect (SA) or Technical Account Manager (TAM) for further assistance.