How ZS used Network Orchestration for AWS Transit Gateway to optimize costs and scale up

This article discusses how the management consulting firm ZS optimized their AWS network infrastructure by replacing a third-party solution with AWS services to reduce costs and improve scalability. ZS previously relied on a third-party EC2 tool to manage their complex global network spanning multiple AWS regions and accounts, but sought to adopt a more serverless and cost-effective approach.

Specifically, the article covers:

• ZS's previous network architecture using a third-party tool for route orchestration, load balancing, NAT/FQDN filtering, IPsec VPN tunnels, and monitoring
• How ZS replaced the route orchestration component with AWS Network Orchestration for Transit Gateway and custom CloudFormation resources
• Using AWS Gateway Load Balancer for load balancing traffic between firewalls instead of third-party EC2 instances
• Leveraging existing firewall appliances for NAT/FQDN filtering and deploying a new firewall appliance for IPsec VPN tunnels
• The new serverless architecture's benefits, including increased reliability, scalability, reduced operational overhead, and cost savings by eliminating third-party EC2 instances and licensing fees