Can I use a droplet to VPN into our office network for NodeJS projects?

February 22, 2019 744 views
Networking VPN Open Source Ubuntu 18.04
trillobite
By:
trillobite

Due to PCI-Compliance and lack of space in our server closet, we are looking to use openvpn to connect a Droplet to our network for app development purposes. We don’t wish to simply open ports in our firewall as that complicates PCI Compliance network scans.

I have personally attempted to handle this myself, as we already have a pfSense router, and I setup our remote workers to VPN into our network using Linux and Windows. However, I am not having any success with a droplet.

I am not really going to go into detail on what I have tried so far, as I wish to see if anyone has done this, and how they have done it. I guess, if nobody has tried to do this, I’ll make a new post asking what I did incorrectly.

Log In to Comment
1 Answer
jarland MOD February 26, 2019

Hey friend,

It’s definitely possible to do. Obviously the steps are very relative but it sounds like you have a fine handle on what you’re doing. The one thing I want to alert you to is just common enough that it could be relevant:

Every now and then I hear from someone who will do a VPN tunneling setup and the traffic simply dies on the way out of our network. This is because they’ll route it in such a way that the outbound packets from our droplet have the source IP of the connecting client in the headers, rather than the droplet IP. This is technically how IP spoofing works so we drop that traffic to be good neighbors. Perhaps this information is of use to you in configuring this.

Jarland

Reply
Have another answer? Share your knowledge.

Related