Hello!
Just a simple question. Is there any way to set up a VPN server that allows different endpoints to establish tunnels but getting isolated between them once they are connected? Other than Firewall Cloud, using different VPC´s.
I mean, I would like to have a VPN server with more than two interfaces attached. Example:
GE 01 - Internet
GE 02 - VPC A
GE 03 - VPC B
GE 04 - VPC C
On the other hand, is there any way to accomplish this with a droplet or a virtual firewall?
Thank you, I appreciate it.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi there,
You can do something close to this on DigitalOcean, right now Droplets still only get a single VPC interface, so you can’t attach GE01, GE02, GE03, GE04 the way you would on dedicated network appliances. But with the newer VPC peering feature you can connect multiple VPCs together and route traffic between them:
https://docs.digitalocean.com/products/networking/vpc/how-to/create-peering/
So one option is to run a single VPN server in one VPC, peer the other VPCs to it, and then isolate tenants using routing rules and firewall policies inside the VPN server. It’s not the same as true multi-NIC isolation, but depending on how strict the separation needs to be, it might get you close.
For strong, hard isolation though, I’d still lean toward separate VPN servers per VPC.
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.