Does DO Gateway block returning packets in site to site IPSec VPN connections? It is possible to create this setup using droplets?

Posted January 11, 2019 2.2k views

I need to setup site-to-site VPN connection to another site to transfer request to that site.

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Submit an Answer
2 answers

Hey friend,

If the packets spoof the origin then they are dropped, but otherwise there are no limitations on our network. Dropping spoofed traffic is really important to us, anything else is fair game. Hope that helps :)



I recently tried to setup OpenVPN on my DO droplets but I failed because of the following reason:

DO hypervisors are configured to accept traffic from specific IPs originating from the droplets, these IPs are assigned to the droplet using public and private IPs.

When I contatced DO support they adviced me to use Tinc VPN as described in this tutorial please follow it and it should help you to setup the VPN, if you need any help do not be afraid to comment back on this answer or contact me on my email found in my profile page.

Hope this helps.

by Mitchell Anicas
In this tutorial, we will go over how to use Tinc, an open source Virtual Private Network (VPN) daemon, to create a secure VPN that your servers can communicate on as if they were on a local network. We will also demonstrate how to use Tinc to set up a secure tunnel into a private network. We will be using Ubuntu 14.04 servers, but the configurations can be adapted for use with any other OS.
  • Hi Mohsen47,

    i don’t actually have option to use tinc as I can’t ask the remote site to install it. They have very specific setup, that is IPSec VPN 2 phase connection, which only works through site-to-site setup.