By trillobite
Due to PCI-Compliance and lack of space in our server closet, we are looking to use openvpn to connect a Droplet to our network for app development purposes. We don’t wish to simply open ports in our firewall as that complicates PCI Compliance network scans.
I have personally attempted to handle this myself, as we already have a pfSense router, and I setup our remote workers to VPN into our network using Linux and Windows. However, I am not having any success with a droplet.
I am not really going to go into detail on what I have tried so far, as I wish to see if anyone has done this, and how they have done it. I guess, if nobody has tried to do this, I’ll make a new post asking what I did incorrectly.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Have you succeed with that yet? Because I’m thinking about this too now
Hey friend,
It’s definitely possible to do. Obviously the steps are very relative but it sounds like you have a fine handle on what you’re doing. The one thing I want to alert you to is just common enough that it could be relevant:
Every now and then I hear from someone who will do a VPN tunneling setup and the traffic simply dies on the way out of our network. This is because they’ll route it in such a way that the outbound packets from our droplet have the source IP of the connecting client in the headers, rather than the droplet IP. This is technically how IP spoofing works so we drop that traffic to be good neighbors. Perhaps this information is of use to you in configuring this.
Jarland
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.