Direct Connect (DX) establishes a dedicated, private network connection between your data center and AWS — bypassing the public internet entirely. It provides consistent, low-latency connectivity for hybrid workloads.
| Feature | Direct Connect | Site-to-Site VPN |
|---|---|---|
| Path | Dedicated private line (no internet) | Encrypted tunnel over internet |
| Latency | Consistent, low latency | Variable (internet dependent) |
| Bandwidth | 1 Gbps or 10 Gbps dedicated | Up to 1.25 Gbps per tunnel |
| Setup time | 1-3 months (physical install) | Minutes to hours |
| Cost | High (monthly port fee + partner fee) | Low ($0.05/hour per connection) |
| Encryption | Not encrypted by default (add VPN on top) | Encrypted (IPSec) |
| Best For | Production hybrid workloads, large data transfer | Backup, testing, small offices |
Your Data Center
|
|-- Physical fiber cable
|
[Direct Connect Location (co-location facility)]
|
|-- AWS infrastructure
|
[AWS Region]
|
VPC via Virtual Interfaces:
- Private VIF: connects to VPC private IP space
- Public VIF: connects to AWS public services (S3, DynamoDB)
- Transit VIF: connects to Transit Gateway