/tags/cdk/Recent content in Cdk on $>sh 'hello-friend.sh'Hugoen-us<a href="https://creativecommons.org/licenses/by-sa/4.0/" target="_blank" rel="noopener">CC BY-SA 4.0</a>Mon, 01 Jan 0001 00:00:00 +0000/blog/2026/09/02_aws-network-setup/Wed, 02 Sep 2026 00:00:00 +0000/blog/2026/09/02_aws-network-setup/<blockquote> <p>IPTABLES(8)</p> <p>Each chain is a list of rules which can match a set of packets. Each rule specifies what to do with a packet that matches. This is called a `target&rsquo;, which may be a jump to a user-defined chain in the same table.</p> </blockquote> <p>Hello there!</p> <p>I have been using this setup to deploy VPCs in my own projects and dev environments for a while. It did the job, so at some point I decided to clean it up, make it better, and pull it out into its own project. That is <a href="https://github.com/trucoit/cdk-vpc-vpn-gw">cdk-vpc-vpn-gw</a>. It is a VPC with public subnets, optional private subnets, and an optional egress gateway that can carry a VPN. This is a brief comment on how it works and why it looks the way it does. The <a href="https://github.com/trucoit/cdk-vpc-vpn-gw#deploy">README</a> has the deploy steps, so I am not repeating them here.</p>