# Running with VPC peering

**URL:** <https://forum.datomic.com/t/running-with-vpc-peering/441>\
**Category:** Datomic Cloud\
**Created:** [May 28, 2018, 9:50pm UTC](https://forum.datomic.com/t/running-with-vpc-peering/441 "2018-05-28T21:50:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sparkofreason](https://avatars.discourse-cdn.com/v4/letter/s/8dc957/32.png) [@sparkofreason](https://forum.datomic.com/u/sparkofreason)\
**Post date:** [May 28, 2018, 9:50pm UTC](https://forum.datomic.com/t/running-with-vpc-peering/441/1 "2018-05-28T21:50:28Z")

</div>

Has anybody successfully accessed Datomic Cloud across peered VPCs? Our app uses another service that requires VPC peering, and the same procedures do not work when applied to Datomic.

---

<div class="post-metadata">

**Author:** ![marshall](https://sea2.discourse-cdn.com/flex016/user_avatar/forum.datomic.com/marshall/32/48_2.png) [@marshall](https://forum.datomic.com/u/marshall)\
**Post date:** [June 4, 2018, 1:01pm UTC](https://forum.datomic.com/t/running-with-vpc-peering/441/2 "2018-06-04T13:01:58Z")

</div>

What specific issue(s) are you encountering?

As documented [here](https://docs.datomic.com/cloud/operation/client-applications.html#vpc-peering), you can indeed use VPC peering to connect to a Datomic Cloud instance from another VPC.

There are several bi-directional configurations required. In particular, did you configure the route tables and the security groups in _both_ the Datomic Cloud VPC and your VPC to enable mutual access?

---

<div class="post-metadata">

**Author:** ![sparkofreason](https://avatars.discourse-cdn.com/v4/letter/s/8dc957/32.png) [@sparkofreason](https://forum.datomic.com/u/sparkofreason)\
**Post date:** [June 4, 2018, 2:12pm UTC](https://forum.datomic.com/t/running-with-vpc-peering/441/3 "2018-06-04T14:12:54Z")

</div>

I pretty much followed the instructions as stated, configured datomic-$(SystemName)-entry to allow entry from my app security group. Since it did not specifically say to do the reverse and I had recently been able to configure VPC peering with a managed Kafka service without this step, I did not try that. We are curently running successfully in the Datomic apps SG provided by the install. I will try the bidirectional config on our next iteration of ops configuration.
