AWS OpenVPN Endpoint Script

20 points by Ttlequals0 9 years ago | 8 comments

I've been playing with this lately:

It's essentially a set of Ansible scripts that will install a set of VPN daemons on your cloud instance* , such as OpenVPN, Stunnel, OpenConnect, L2TP/IPsec, Shadowsocks, and more. Seems to be running well so far.

* supported providers are Amazon EC2, DigitalOcean, Google Compute Engine, Linode and Rackspace.

ljoshua 9 years ago |

I also like the Tinfoil Security VPN setup, which does it for you fairly automagically using DO:

https://www.tinfoilsecurity.com/vpn/new

andy_ppp 9 years ago |

Funny this should appear; I just (literally connected for 16m 27s) ended up using this today to create something similar on digital ocean... The Starbucks wifi has a mind of it's own.

https://github.com/hwdsl2/setup-ipsec-vpn

Recommended.

neximo64 9 years ago |

I've played around with a couple of ways to get into AWS machines, Zerotier seems the easiest hands down

mdekkers 9 years ago | |

Zerotier looks great, and affordable. Do you use this in production? any drawbacks?

neximo64 9 years ago | | |

Its free and open source as far as i know (you mentioned affordable). The drawbacks i've had so far are on bad routers (double NATs) where it gets a bit sticky with connecting, otherwise all quite good, one of the best pieces of software i've ever used.

If the configuration when connecting behind a NAT on a badly configured router i've never really had a bad experience with ZT. I use it to connect into my AWS VPC then connect to anything I need to as if it were local.

phasecode 9 years ago |

What advantage does this have over the OpenVPN Access Server on the AWS Marketplace? It does everything except attach the EIP at the end.

Ttlequals0 9 years ago | |

The goal for this was a dynamic approach to create and destroy endpoints on the fly. The OpenVPN Access Sever is typically for a more permanent deployment.