> For the complete documentation index, see [llms.txt](https://karansingh.gitbook.io/ccpnotes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://karansingh.gitbook.io/ccpnotes/vpc-and-networking/direct-connect-and-site-to-site-vpn.md).

# Direct Connect & Site-to-site VPN

* These are both **services for connecting on-premises data centre to VPC.**<br>
* **Site-to-site VPN:**\
  \- Data **travels over the public internet** (but it is automatically encrypted).\
  \- Can be set up very quickly (can be set up in 5 minutes).\
  \- **On-premises needs a customer gateway (CGW).**\
  \- **AWS need a virtual private gateway (VGW).**<br>
* **Direct Connect:**\
  \- This is a **physical connection between on-premises and AWS.**\
  \- **Private, secure and fast.**\
  \- **Data travels over private network.**\
  \- **Takes 1 month+ to set up** (so very long).\
  \- Faster but also much more expensive.<br>