AWS network-manager: Add system routes to Cloud WAN route evaluation order
Summary
Inserts 'System routes' as step 2 in the route evaluation order (renumbering subsequent steps) and links to the 1:1 NAT routing behavior page.
Security assessment
The edit documents routing precedence for NAT-installed system routes. Routing order can affect traffic paths, but the change is descriptive documentation of feature behavior, not a fix or hardening guidance.
Evidence
+ 2. System routes. For more information, see [Routing behavior for 1:1 NAT in AWS Cloud WAN](./cloudwan-nat-routing.html).
Diff
diff --git a/network-manager/latest/cloudwan/cloudwan-route-evaluation.md b/network-manager/latest/cloudwan/cloudwan-route-evaluation.md index 03da029..38fc2ba 100644 --- a//network-manager/latest/cloudwan/cloudwan-route-evaluation.md +++ b//network-manager/latest/cloudwan/cloudwan-route-evaluation.md @@ -17 +17 @@ Cloud WAN evaluates routes at each core network edge in the following order: - 2. VPC-propagated routes in the same Region. + 2. System routes. For more information, see [Routing behavior for 1:1 NAT in AWS Cloud WAN](./cloudwan-nat-routing.html). @@ -19 +19,3 @@ Cloud WAN evaluates routes at each core network edge in the following order: - 3. For dynamic routes received at the core network with an _unequal_ AS path length and/or MED BGP attributes, Cloud WAN evaluates them in the following order: + 3. VPC-propagated routes in the same Region. + + 4. For dynamic routes received at the core network with an _unequal_ AS path length and/or MED BGP attributes, Cloud WAN evaluates them in the following order: @@ -25 +27 @@ Cloud WAN evaluates routes at each core network edge in the following order: - 4. For dynamic routes received at the core network with _equal_ AS path length and MED BGP attributes, Cloud WAN evaluates them in the following order: + 5. For dynamic routes received at the core network with _equal_ AS path length and MED BGP attributes, Cloud WAN evaluates them in the following order: