Skip to content

Home

Jump to bottom
Rob Coward edited this page Oct 18, 2016 · 14 revisions

VPN Endpoint on OpenStack

This repository contains a sample HEAT template and instructions for deploying a VM into your OpenStack project to function as a VPN end-point, allowing secure connections to be made to other projects, vCloud Director VDCs, or back to your own infrastructure in-house.

These instructions make use of a pfSense Firewall Appliance to provide the IPSEC VPN endpoint. UKCloud provide an image for the pfSense Appliance in the public catalog, however you are welcome to upload your own image if you prefer. These are the steps we used to prepare the public pfSense Appliance image on our Cloud Native Infrastructure.

Pre-Requisite Infrastructure

This example configuration assumes that you have already deployed certain resources in your project:

  • A router connected to the 'internet' external network.
  • A network / subnet with an interface added to the router.
  • A linux VM running OpenSSH, deployed on the subnet which has a floating IP address associated.
  • An ssh client on your local desktop that is capable of connecting to the linux VM in your project, and can setup an SSH tunnel over the connection.

If you have not already deployed any resources in your project, have a look here for details on how to get started.

Launching the VPN Stack

Network Architecture

ukcloud

Clone this wiki locally