Design hybrid cloud interconnects (AWS Direct Connect, Azure ExpressRoute, Google Interconnect) with TGW/VPN backup. Use when attaching a new VPC/VNet or reviewing BGP to a cloud on-ramp.
Scanned 9/5/2026
Install to Claude Code
Skills Directorynpx -y skills add gesh75/claude-skill-lint --skill cloud-hybrid-connect --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Cloud Hybrid Connect?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/gesh75-cloud-hybrid-connect)More formats (shields.io, HTML) on the badges page.
---
name: cloud-hybrid-connect
description: Design hybrid cloud interconnects (AWS Direct Connect, Azure ExpressRoute, Google Interconnect) with TGW/VPN backup. Use when attaching a new VPC/VNet or reviewing BGP to a cloud on-ramp.
argument-hint: "[cloud] [region]"
allowed-tools: Read Grep
license: MIT
---
# Cloud hybrid connect
Do not use for IAM or storage design. Not for SD-WAN DIA to SaaS.
## Procedure
1. Two diverse interconnects in two colos. VPN overlay is backup, not the primary data path.
2. BGP: private ASN, MD5 or GTSM, prefix-filters in both directions. Cloud must not default-route you unless intended.
3. Segmentation: prod/nonprod/shared in separate VRFs or TGW route tables. No 0.0.0.0/0 from a VPC into the campus.
4. MACsec on DX/ER where the provider supports it. MTU 8500 if the fabric allows.
5. Verify: failover the primary, confirm RTO, and that the prefix-filter still holds.
```text
DX dx-iad-1 vlan 101 10.255.1.0/31 asn 64512
advertise 10.24.0.0/16 2001:db8:24::/48
accept 10.50.0.0/16 2600:1f18::/32
```
## Anti-patterns
- Never accept the cloud's full table "for now".
- Do not share a DX VLAN across prod and a sandbox.
## Safety
Route-filter changes are change-guarded. A leaked default takes the campus to the cloud.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less tokens", "be brief", or invokes /caveman. Also auto-triggers when token efficiency is requested.
Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...
Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.
**Complete production-ready guide for Google Gemini embeddings API** This skill provides comprehensive coverage of the `gemini-embedding-001` model for generating text embeddings, including SDK usage, REST API patterns, batch processing, RAG integration with Cloudflare Vectorize, and advanced use cases like semantic search and document clustering. ---
Recovers prior coding-agent session context by running `catchup <agent> --since-compact`, which extracts a clean summary of a previous Codex, Claude Code, Antigravity, OpenCode, or Pi Agent session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", or asks to recover/summarize a previous session before continuing. Do NOT use for the current conversation, git history, or any non-agent log.
