Question
Can I use a droplet to VPN into our office network for NodeJS projects?
- Posted on February 22, 2019
- VPNOpen SourceNetworkingUbuntu 18.04
Asked by trillobite
Due to PCI-Compliance and lack of space in our server closet, we are looking to use openvpn to connect a Droplet to our network for app development purposes. We don’t wish to simply open ports in our firewall as that complicates PCI Compliance network scans.
I have personally attempted to handle this myself, as we already have a pfSense router, and I setup our remote workers to VPN into our network using Linux and Windows. However, I am not having any success with a droplet.
I am not really going to go into detail on what I have tried so far, as I wish to see if anyone has done this, and how they have done it. I guess, if nobody has tried to do this, I’ll make a new post asking what I did incorrectly.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Want to learn more? Join the DigitalOcean Community!
Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.
Have you succeed with that yet? Because I’m thinking about this too now
Hey friend,
It’s definitely possible to do. Obviously the steps are very relative but it sounds like you have a fine handle on what you’re doing. The one thing I want to alert you to is just common enough that it could be relevant:
Every now and then I hear from someone who will do a VPN tunneling setup and the traffic simply dies on the way out of our network. This is because they’ll route it in such a way that the outbound packets from our droplet have the source IP of the connecting client in the headers, rather than the droplet IP. This is technically how IP spoofing works so we drop that traffic to be good neighbors. Perhaps this information is of use to you in configuring this.
Jarland