Configure Your Network Routing - AWS

Before you begin

You need:

About this task

Your client-side VPC must know the public and private subnet CIDRs of your MarkLogic VPC, enabling both networks to communicate with each other. To do so, you can configure your route tables using our template.


  1. Download the dhs-route-config.template. If necessary, modify the template.
    Note: The dhs-route-config.template is an optional template you can use to configure your route tables. If you do not want to use our template to configure your route tables, see
  2. Navigate to the AWS CloudFormation Console page.

    AWS CloudFormation create network stack

    1. Click Create stack.
    2. Click With new resources (standard).
    Important: Before you continue, ensure you are creating your stack in a region supported by Data Hub Service (DHS). See Supported Regions - AWS.
  3. In the Create stack page, specify the dhs-route-config.template.

    Sample VPC network routing configuration specify template

    • Click Next.
  4. In the Specify Stack Details page, supply the fields with the following information:
    Important: The service public and private subnet CIDRs must not overlap with the public and private subnet CIDRs you specified when setting up your client-side VPC.
    Note: For more general information on creating a stack, see Creating a Stack on the AWS CloudFormation Console.

    Sample VPC network routing configuration

    Field Description
    Stack name The name for this collection of AWS network resources.
    Public and Private Subnet Route Table IDs Your client-side VPC's route tables (rtb-*) used to route network subnet CIDRs to the peering connection ID (pcx-*), enabling your client-side VPC and MarkLogic VPC to communicate with each other.

    To find your Route Tables in AWS CloudFormation Console if you used our template, navigate to the AWS CloudFormation Console.

    1. Select the stack created when you set up a client-side VPC.
    2. Select the Outputs tab.

    To find all of your route tables in AWS, navigate to AWS.

    1. From the top menu, navigate to Services > VPC.
    2. In the Resources by Region page, click Route Tables.
    Tip: You can filter by your VPC ID (vpc-*) to find the route tables for your client-side VPC.
    Service Public and Private Subnet CIDRs The public and private subnet CIDRs calculated from the network CIDR in your peered DHS network configuration.

    Enter the public subnet CIDRs in the Service Public Subnet CIDR fields and the private subnet CIDRs in the Service Private Subnet CIDR fields. Enter one CIDR in each field. Example:,,,,,

    Peering Connection ID The Peering Connection ID (pcx-*) in your peered DHS network configuration.

    Click the following link to view a full list of client-side network resources.

    • Click Next.
  5. (Optional) In the Configure stack options page, specify tags, IAM roles, and advanced options.
    • Click Next.
  6. Review the details.

    Review page for new network routing

    • To make changes, click Previous.
    • To confirm, click Create Stack.


The new AWS stack is displayed. In the AWS CloudFormation Console, the status of each stack must be CREATE_COMPLETE.
Statuses of AWS stacks

What to do next

Create a Data Hub Service with a peered network: